
Anti_suspend
Shellcode-based process protection that prevents thread suspension, blocks debugger attach, masks hardware breakpoints, and hides threads from…

Shellcode-based process protection that prevents thread suspension, blocks debugger attach, masks hardware breakpoints, and hides threads from…

Static vulnerability findings tracker with parallel search across 11 CVE databases, EPSS enrichment, CISA KEV badges, coordinated disclosure…

Customer Assurance Operating System. Answer the security questionnaires your customers send you, once.

Embed multiple secret messages in LLM chat token choices using arithmetic/Discop steganographic coders, with bit-exact decoding and steganalysis…

Strip credential-like content from free-form strings before they reach logs or telemetry. Part of the phpboyscout Go toolkit. ·…

Signatures and IoCs from public Volexity blog posts.

Converts Sigma detection rules into OpenSearch Lucene and PPL queries, including alerting Monitor Rules and correlation support for SIEM detection…

Rules generated from our investigations.

HardeningKitty - Checks and hardens your Windows configuration

Sigma rules from Joe Security


A PowerShell script that attempts to help malware analysts hide their VMware Windows VM's from malware that may be trying to evade analysis.

An open library of adversary emulation plans designed to empower organizations to test their defenses based on real-world TTPs.

Slides from various conference talks

This project aims to compare and evaluate the telemetry of various EDR products.

Sec-Gemini is a cutting-edge AI model designed to enhance cybersecurity capabilities and empower defenders in the ongoing battle against cyber…