
ProHunter
Graph-based threat detection system using inexact graph vector matching to compare threat graphs with CTI-derived attack query graphs for automated…

Graph-based threat detection system using inexact graph vector matching to compare threat graphs with CTI-derived attack query graphs for automated…

A tool for malicious behavior detection in IoT devices

amavis is a high-performance email content filter framework written in Perl.

Kratos is a high-performance Windows File System Minifilter driver designed to detect, block, and permanently immunize

Real-time malicious traffic detection system using public blacklists, static malware trails, and heuristic analysis to identify threats across DNS,…

Runtime application self-protection engine that hooks into application servers to monitor and block malicious database queries, file operations, and…

Linux kernel-space HID injection attack detector using eBPF. Monitors USB and Bluetooth HID devices for anomalous keystroke timing and automatically…

Lightweight native Windows memory scanner for AV/EDR platforms, detecting suspicious mapped images and manual DLL injection techniques by IAT thunk

ETW based POC to identify direct and indirect syscalls

Zeek detector for QuasarRat

Detection for SUNBURST C2 Stage-1 using Shannon Entropy

A Zeek based AsyncRAT malware detector.