
Hodometer
A single-file native Windows tray application (C, Win32, no runtime) that shows exactly which program is sending and receiving bytes and to which…

A single-file native Windows tray application (C, Win32, no runtime) that shows exactly which program is sending and receiving bytes and to which…

A process monitoring tool that tries to detect exploitation

Blazing-Fast Token-Efficient Intrusion Detection System (IDS) based on TypeSafe's Jev.

Standalone Windows VM malware sandbox running capemon, with GUI triage viewer, YARA signatures, IOC extraction, network analysis, and…

Linux namespaces and seccomp-bpf sandbox

TheLightScope

PowerShell script to mitigate CVE-2022-41040 on affected Exchange servers by applying recommended configuration changes.

PowerShell Remote Download Cradle Generator & Obfuscator

Interactive GNU/Linux application firewall that filters outbound connections, blocks ads and malware domains, manages system firewall rules via GUI,…

A toolset to make a system look as if it was the victim of an APT attack

Security sensor for realtime threat detection and protection