
packetfence
PacketFence is a fully supported, trusted, Free and Open Source network access control (NAC) solution. Boasting an impressive feature set including a…

PacketFence is a fully supported, trusted, Free and Open Source network access control (NAC) solution. Boasting an impressive feature set including a…

GitHub App to set and enforce security policies

GlobaLeaks is a free and open-source whistleblowing software enabling anyone to easily set up and maintain a secure reporting platform.

Go-based Web Application Firewall library compatible with ModSecurity SecLang rules and OWASP Core Rule Set v4, providing real-time HTTP traffic…

Open-source YAML rule set for detecting and preventing email attacks including BEC, credential phishing, malware, and supporting threat hunting.

This application gives Mac users in enterprise environments control over the administration of their machines by elevating their access level to…

A repository of sysmon configuration modules

A tool uses the QoS Policy (Pacer.sys) to throttle Endpoint Detection and Response (EDR) agents from connecting to the server.

Corelight Dashboards and Parsers for Sentinel One Singularity

Best Practice Auditd Configuration

Tool that gathers a customizable set of ETW telemetry and generates user-defined detections

TAXII server implementation in Python from EclecticIQ

Set of tools to analyze Windows sandboxes for exposed attack surface.

Blue Team detection lab created with Terraform and Ansible in Azure.

The remediation script should set the reg entries described in https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-36884 . The detection…

Windows tool to list, get, set, protect, and unprotect process protection levels (PP/L) for debugging, inspection, and privilege escalation.

Tools and technical write-ups describing attacking techniques that rely on concealing code execution on Windows

MDE relies on some of the Audit settings to be enabled