
ebpf-container-escape-framework
Audit only eBPF EDR for Linux 5.15+ LTS: 14 kernel hooks, 15 actions (13 MITRE techniques), process lineage, SIEM export, K8s/Docker ready.
container-securitydefensive-toolsincident-response+2
8

Audit only eBPF EDR for Linux 5.15+ LTS: 14 kernel hooks, 15 actions (13 MITRE techniques), process lineage, SIEM export, K8s/Docker ready.

CVE-2026-52813 (Gogs Path Traversal → Git Hooks RCE) defensive writeup: root-cause & patch analysis, Sigma/SIEM detection rules, IOCs, non-intrusive…

Look for un-sinkholed C&C IPs in your Bro logs (from Bambanek Consulting C&C master list)

Real Intelligence Threat Analytics (RITA) is a framework for detecting command and control communication through network traffic analysis.

Small example repo for looking into log4j CVE-2021-44228

Run on your ManageEngine server

Extract useful information from PANOS support file for CVE-2024-3400