

Runtime application self-protection engine that hooks into application servers to monitor and block malicious database queries, file operations, and…

Real-time malicious traffic detection system using public blacklists, static malware trails, and heuristic analysis to identify threats across DNS,…

Lightweight native Windows memory scanner for AV/EDR platforms, detecting suspicious mapped images and manual DLL injection techniques by IAT thunk

ETW based POC to identify direct and indirect syscalls

Kratos is a high-performance Windows File System Minifilter driver designed to detect, block, and permanently immunize

A tool for malicious behavior detection in IoT devices


amavis is a high-performance email content filter framework written in Perl.

Zeek detector for QuasarRat

A Zeek based AsyncRAT malware detector.

Detection for SUNBURST C2 Stage-1 using Shannon Entropy