


USB port access control tool for Debian with whitelist management, automatic background scanning daemon, and CLI interface to block or allow USB…

Execution-Layer Security (ELS) for AI agents — policy-enforced shell with audit.

Collects comprehensive triage data from macOS for incident response, including system logs, file listings, browser data, shell history, and…

Berry Sentinel v5.0 — Advanced behavioral C2 and reverse shell detector for Linux/Windows/Unix systems. Features real-time connection analysis,…

Trace every shell environment variable to its exact file and line origin. Audit shell configs for dead entries, duplicates, and orphaned files across…

Demonstrates exploitation of CVE-2024-4577, a PHP CGI RCE on Windows, including attack steps, reverse shell deployment, and ransomware simulation…

macos-collector - Automated Collection of macOS Forensic Artifacts for DFIR