#Edr
Showing 22 of 22 repositories tagged #edr, ranked by stars
Elkeid is an open source solution that can meet the security requirements of various workloads such as hosts, containers and K8s, and serverless. It is derived from ByteDance's internal best practices.
Adversary tradecraft detection, protection, and hunting
An Active Defense and EDR software to empower Blue Teams
iMonitor（冰镜 - 终端行为分析系统）
a tool to help operate in EDRs' blind spots
Sanctum is an experimental proof-of-concept EDR, designed to detect modern malware techniques, above and beyond the capabilities of antivirus. Built in Rust.
Unlock the full brightness of the XDR display of your MacBook Pro
Owlyshield is an EDR framework designed to safeguard vulnerable applications from potential exploitation (C&C, exfiltration and impact).
The world's most powerful System Activity Monitor Engine · 一款功能强大的终端行为采集防御开发套件 ~ 旨在帮助EDR、零信任、数据安全、审计管控等终端安全软件可以快速实现产品功能， 而不用关心底层驱动的开发、维护和兼容性问题，让其可以专注于业务开发
AppLocker-Based EDR Neutralization
AI EDR for developer workstations and autonomous agent fleets. Build Swarm Detection & Response platforms with Clawdstrike.
Dynamic and static analysis with Real Time Malware Analysis with Antivirus for Windows, including open-source XDR (3 EDR projects), ClamAV, YARA-X, machine learning AI, behavioral analysis, Unpacker, Deobfuscator, Decompiler, website signatures, Ghidra, Suricata, Sigma, Kernel, Hypervisior based protection and much more than you can imagine.
A really good DFIR automation for collecting and analyzing evidence designed for cybersecurity professionals.
Open-source EDR for AI agents. Monitor processes, files, network, and behavior of autonomous AI agents.
Repository for SOC analysts, queries to investigate, advanced hunting, sites for analysis, malware samples, courses to improve skills, IOC and monitoring.
「🛡️」AVs/EDRs Evasion tool
Powerful Kernel Windows Platform for Malware Analysis, SRE, Forensics & Threat Hunting
Event Tracing for Windows EDR bypass in Rust (usermode)
用Go编写的轻量文件监控器. 可以监控终端上指定文件夹内的变化, 阻止删除,修改,新增操作. 可以用于AWD比赛或者终端应急响应
ShadowStrike A Windows EDR Platform
Easy to extend initial access scenario to help with EDR testing on Linux and Mac
APC Queue Injection EDR Evasion in Rust