linux-malware-detect
rfxn/linux-malware-detectMulti-engine Linux malware scanner with five detection stages (MD5, HEX pattern, YARA, ClamAV, statistical), real-time inotify monitoring,…
defensive-toolsmalware-analysisthreat-intelligence+3
1.5k
Tools for blue team, defensive security, and threat protection.
rfxn/linux-malware-detectMulti-engine Linux malware scanner with five detection stages (MD5, HEX pattern, YARA, ClamAV, statistical), real-time inotify monitoring,…
bats3c/darkloadlibraryLoadLibrary for offensive operations
kunai-project/kunaieBPF-based Linux security monitor and threat hunter providing chronologically ordered, container-aware events with on-host correlation for incident…
sublime-security/sublime-rulesOpen-source YAML rule set for detecting and preventing email attacks including BEC, credential phishing, malware, and supporting threat hunting.
altramayor/gatekeeperThe first open-source DDoS protection system
last-byte/persistencesniperPowershell module that can be used by Blue Teams, Incident Responders and System Administrators to hunt persistences implanted in Windows machines.…
intel/intel-linux-processor-microcode-data-files
matthart1983/netwatchReal-time network diagnostics in your terminal. One command, zero config, instant visibility.
emposha/php-shell-detectorWeb Shell Detector – is a php script that helps you find and identify php/cgi(perl)/asp/aspx shells. Web Shell Detector has a “web shells” signature…
travisfsmith/sweetsecurityNetwork Security Monitoring on Raspberry Pi type devices
ion28/bluespawnAn Active Defense and EDR software to empower Blue Teams
p3nt4/powershdllRun PowerShell with rundll32. Bypass software restrictions.
ransomlook/ransomlookAutomated ransomware and leak-site OSINT tracker scraping dark-web markets, monitoring victim posts, enriching actor/crypto data, and sending…
ion-storm/sysmon-configAdvanced Sysmon ATT&CK configuration focusing on Detecting the Most Techniques per Data source in MITRE ATT&CK, Provide Visibility into Forensic…
tylous/zipexecA unique technique to execute binaries from a password protected zip
denoland/clawpatrolWire-level proxy firewall for AI agents that intercepts and gates SQL, Kubernetes, and HTTP traffic using HCL rules, with per-process tunnel…
owasp/java-html-sanitizerTakes third-party HTML and produces HTML that is safe to embed in your web application. Fast and easy to configure.