clawdstrike
backbay-labs/clawdstrikePolicy engine and EDR for AI agent fleets and developer workstations. Monitors tool calls, file access, network flows, and process execution with…
ai-securitycloud-securitycontainer-security+5
286
backbay-labs/clawdstrikePolicy engine and EDR for AI agent fleets and developer workstations. Monitors tool calls, file access, network flows, and process execution with…
malvuln/ransomlordRansomLord is a proof-of-concept Anti-Ransomware exploitation tool that automates the creation of PE files, used to compromise ransomware…
viralmaniar/remote-desktop-caching-This tool allows one to recover old RDP (mstsc) session information in the form of broken PNG files. These PNG files allows Red Team member to…
travisfoley/dfirtriageDigital forensic acquisition tool for Windows based incident response.
spamscanner/spamscannerSpam Scanner is a Node.js anti-spam, email filtering, and phishing prevention tool and service. Built for @ladjs, @forwardemail, @cabinjs, @breejs,…
botherder/androidqfPortable forensic acquisition tool for Android devices that collects relevant data via USB debugging to identify potential spyware or compromise…
olafhartong/bamboozledrA comprehensive ETW (Event Tracing for Windows) event generation tool designed for testing and research purposes.
yeet-src/sigwireLive kernel signal observability tool using eBPF tracepoints to stream every signal raised on a Linux host, showing sender, target, disposition,…
themittenmac/truetreeA command line tool for pstree-like output on macOS with additional pid capturing capabilities
gabrielsoltz/metahubAutomated security findings enrichment and impact evaluation tool for AWS. Enriches vulnerability data with resource context, associations, and tags…
naveenrudra/rttmReal Time Threat Monitoring Tool
cyberark/ketshashA little tool for detecting suspicious privileged NTLM connections, in particular Pass-The-Hash attack, based on event viewer logs.
bsi-bund/rdpcachestitcherRdpCacheStitcher is a tool that supports forensic analysts in reconstructing useful images out of RDP cache bitmaps.
abdulrhmanalfaifi/fennecArtifact collection tool for *nix systems
trustedsec/tscopyPython tool that parses the NTFS $MFT to copy locked files during incident response, bypassing OS locks by reading raw disk locations. Supports…
facebook/mcpguard-dynamicKernel-level eBPF sandbox for securing LLM agent tool calls made through the Model Context Protocol (MCP)
zomato/viniferaA GitHub recon/monitoring tool for finding internal leaks belonging to your organisation.
emrekybs/mrhandlerSSH-based Linux incident response tool that executes diagnostic commands to collect network configs, logs, user accounts, and processes, then…