
DetectRaptor
A repository to share publicly available Velociraptor detection content

A repository to share publicly available Velociraptor detection content

JA4+ is a suite of network fingerprinting standards

Programmatically create hunting rules for deserialization exploitation with multiple keywords, gadget chains, object types, encodings, and rule types

NFStream: a Flexible Network Data Analysis Framework.

Pre-execution intent verification for AI agents. Audits what your AI is about to do, not what it says. Zero dependencies, deterministic, hash-sealed.

Runtime application self-protection engine that hooks into application servers to monitor and block malicious database queries, file operations, and…

Stenographer is a packet capture solution which aims to quickly spool all packets to disk, then provide simple, fast access to subsets of those…

Anticipator is an open-source threat detection platform for multi-agent AI systems.

Kernel-level eBPF sandbox for securing LLM agent tool calls made through the Model Context Protocol (MCP)

The Console Monitor Driver is a KMDF kernel-mode filter driver that captures certain Fast I/O operations (input and output) that is sent to or from…

This is a bash script focus on hardening linux. This is a custom think of windows defender but unlike of their privacy issue. User can feel freedom…

XDP Based Lightweight and Fast Firewall

DShield Sensor Log Collection with ELK

Easy to configure Honeypot for Blue Team

Go library for parsing and executing Sigma detection rules against log entries, supporting field modifiers, CIDR matching, and custom field resolvers…

Enterprise AI agent security toolkit providing pre-flight auditing, configuration hardening, runtime threat detection, and active defense against…