
Crescendo
Crescendo is a swift based, real time event viewer for macOS. It utilizes Apple's Endpoint Security Framework.

Crescendo is a swift based, real time event viewer for macOS. It utilizes Apple's Endpoint Security Framework.



Event-driven AWS security misconfiguration detection framework that monitors multiple accounts in real-time, triggering alerts via Lambda for IAM,…

Automatic security alert response framework by AWS Serverless Application Model

Zeek is a powerful network analysis framework that is much different from the typical IDS you may know.

A framework for PowerShell and PoshSec scripts for network management, security, and maintenance.

camjacking templates

Open-source framework for embedding realistic decoy routes and honey fields into APIs to detect attackers probing business logic, converting…

CLI and Go framework for end-to-end testing of threat detection rules. Detonates attack techniques and verifies alerts in security platforms like…

GitHub mirror of the Linux Kernel's audit repository

A secure low code deception runtime framework, leveraging AI for System Virtualization.

Automated System Hardening Framework

Tool and framework for securely reading untrusted USB mass storage devices.

OWASP Honeypot, Automated Deception Framework.

ROPfuscator is a fine-grained code obfuscation framework for C/C++ programs using ROP (return-oriented programming).

Berry Sentinel v5.0 — Advanced behavioral C2 and reverse shell detector for Linux/Windows/Unix systems. Features real-time connection analysis,…

A fully configurable and extendable Bash obfuscation framework. This tool is intended to help both red team and blue team.