
IoT-Home-Guard
A tool for malicious behavior detection in IoT devices

A tool for malicious behavior detection in IoT devices

Real-time malicious traffic detection system using public blacklists, static malware trails, and heuristic analysis to identify threats across DNS,…

Runtime application self-protection engine that hooks into application servers to monitor and block malicious database queries, file operations, and…

Lightweight native Windows memory scanner for AV/EDR platforms, detecting suspicious mapped images and manual DLL injection techniques by IAT thunk

Graph-based threat detection system using inexact graph vector matching to compare threat graphs with CTI-derived attack query graphs for automated…

Linux kernel-space HID injection attack detector using eBPF. Monitors USB and Bluetooth HID devices for anomalous keystroke timing and automatically…

ETW based POC to identify direct and indirect syscalls

amavis is a high-performance email content filter framework written in Perl.

Kratos is a high-performance Windows File System Minifilter driver designed to detect, block, and permanently immunize

Zeek detector for QuasarRat

Detection for SUNBURST C2 Stage-1 using Shannon Entropy

A Zeek based AsyncRAT malware detector.