process-watcher
neo23x0/process-watcherA process monitoring tool that tries to detect exploitation
defensive-toolsdynamic-analysis-sandboxingincident-response+4
115
neo23x0/process-watcherA process monitoring tool that tries to detect exploitation
iomoath/filewatchtowerFWT is a security analysis and file monitoring tool that utilizes Sysmon events.
brandon7cc/mac-monitorAdvanced macOS system monitor leveraging Apple Endpoint Security to collect, enrich, and display process, file, memory, and XPC events for malware…
3lp4tr0n/beaconhunterDetect and respond to Cobalt Strike beacons using ETW.
kaisonox/apiscopeAn API hooking framework for intercepting and monitoring Windows applications
mushorg/buttinskyBotnet monitoring is a crucial part in threat analysis and often neglected due to the lack of proper open source tools. Our tool will provide an open…
wifiphisher/wifiphisherRogue Access Point framework for red team engagements and Wi-Fi security testing. Performs Evil Twin, KARMA, and Known Beacons attacks to achieve…
foxio-llc/ja4JA4+ is a suite of network fingerprinting standards
echowei/deeptrafficDeep Learning models for network traffic classification
withsecurelabs/doublepulsar-c2-traffic-decryptorA python2 script for processing a PCAP file to decrypt C2 traffic sent to DOUBLEPULSAR implant
voidsecsoftwares/voidsyscallCross-platform syscall-powered implant & C2 — direct syscalls (Win), raw syscalls (Linux), HTTPS/DNS/ICMP channels. No winapi layer.
sans-blue-team/deepbluecliPowerShell-based threat hunting tool that analyzes Windows Event Logs to detect malicious activity including credential attacks, obfuscated commands,…
glmcdona/process-dumpWindows tool for dumping malware PE files from memory back to disk for analysis.
mandiant/flare-fakenet-ngFakeNet-NG - Next Generation Dynamic Network Analysis Tool
srixivas/pcapxray❄️ PcapXray - A Network Forensics Tool - To visualize a Packet Capture offline as a Network Diagram including device identification, highlight…
felixweyne/imaginaryc2Imaginary C2 is a python tool which aims to help in the behavioral (network) analysis of malware. Imaginary C2 hosts a HTTP server which captures…
getagentseal/agentsealSecurity toolkit for AI agents. Scan your machine for dangerous skills and MCP configs, monitor for supply chain attacks, test prompt injection…
aniket2912/all-cehv13-module-wise-pdf-reportsPractical labs, notes, and reports for CEH v13 modules — covering web hacking, network pentesting, malware analysis, social engineering, and security…