
clamtk
An easy to use, light-weight, on-demand virus scanner for Linux systems. For additional help, see the <a…

An easy to use, light-weight, on-demand virus scanner for Linux systems. For additional help, see the <a…

Rust-based tool to detect and mitigate CVE-2024-39930 ptrace exploitation, providing binary-level analysis and defensive countermeasures for Linux…

Automated Linux incident response script with live triage, memory acquisition (LiME), disk imaging, YARA scanning, and HTML report generation.

Provides BigFix Fixlets and analyses to detect Log4j vulnerabilities (CVE-2021-44228, CVE-2021-45046, CVE-2021-45105) across Windows and Linux…

SSH-based Linux incident response tool that executes diagnostic commands to collect network configs, logs, user accounts, and processes, then…

Generates portable SystemTap kernel modules to mitigate CVE-2013-2094 on Enterprise Linux systems, with automated build and deployment scripts for…

Detection script for CVE-2026-31431 (Copy Fail) that checks kernel version, patch presence, kernel configs, AF_ALG socket availability, setuid…


Kernel module for volatile memory acquisition from Linux and Android devices, producing forensically sound captures to disk or over the network.

Educational repository detailing CVE-2026-46300 (Fragnesia), a Linux kernel local privilege escalation vulnerability. Provides technical analysis,…

Automated forensic analysis tool for Google Workspace audit logs. Acquires all log types, maps events to MITRE ATT&CK Cloud Framework, and identifies…

Script to check if system are vulnable to cve-2026-23111

Detect and mitigate CVE-2026-31431 (Copy Fail) on Linux systems.

Scripts to triage compromised systems (Linux, ESXi, FreeBSD/NetScaler)

Archived, moved to codesource/cve-check. Shell script to detect CVE-2026-31431 (Copy Fail) exposure and mitigations on Linux systems: kernel check,…

Rip Raw is a small tool to analyse the memory of compromised Linux systems.

Multi-engine Linux malware scanner with five detection stages (MD5, HEX pattern, YARA, ClamAV, statistical), real-time inotify monitoring,…

Semantic Observability for UNIX Systems - A lightweight C-based system prober with AI-powered analysis