
ossec-hids
OSSEC is an Open Source Host-based Intrusion Detection System that performs log analysis, file integrity checking, policy monitoring, rootkit…
defensive-toolsintrusion-detectionlog-analysis

OSSEC is an Open Source Host-based Intrusion Detection System that performs log analysis, file integrity checking, policy monitoring, rootkit…


Endpoint detection & Malware analysis software

ETW based POC to identify direct and indirect syscalls

Useful access control entries (ACE) on system access control list (SACL) of securable objects to find potential adversarial activity

pySigma OpenSearch backend

Cloud Canary Object Orchestration Management Platform

Linux kernel-space HID injection attack detector using eBPF. Monitors USB and Bluetooth HID devices for anomalous keystroke timing and automatically…