#Endpoint-security
Showing 23 of 23 repositories tagged #endpoint-security, ranked by stars
Security Onion is a free and open platform for threat hunting, enterprise security monitoring, and log management. It includes our own interfaces for alerting, dashboards, hunting, PCAP, detections, and case management. It also includes other tools such as osquery, CyberChef, Elasticsearch, Logstash, Kibana, Suricata, and Zeek.
A binary authorization and monitoring system for macOS
Digging Deeper....
"The missing ProcMon for macOS": Mac Monitor records Endpoint Security events and displays them for analysis.
Tinfoil Chat - Onion-routed, endpoint secure messaging system
Zentral is a high-visibility platform for controlling Apple endpoints in enterprises. It brings great observability to IT and makes tracking & reporting compliance much less manual.
A binary and file access authorization system for macOS.
Fast and efficient osquery management
A desktop application that checks security-related settings and makes recommendations for improvements without requiring central device management or automated reporting.
Automatically audit your Mac for basic security hygiene.
The world's most powerful System Activity Monitor Engine · 一款功能强大的终端行为采集防御开发套件 ~ 旨在帮助EDR、零信任、数据安全、审计管控等终端安全软件可以快速实现产品功能， 而不用关心底层驱动的开发、维护和兼容性问题，让其可以专注于业务开发
AI EDR for developer workstations and autonomous agent fleets. Build Swarm Detection & Response platforms with Clawdstrike.
Agent Beacon is the world's first open-source telemetry layer for AI agents wherever they run: locally, in CI, or in the cloud.
Endpoint detection & Malware analysis software
Thumper is an open-source tripwire for the Shai-Hulud npm worm. Plant fake-but-realistic credentials where the worm scans - the instant one is read, you know the box might be breached. Free and built in the open by Jesta.
Windows Exploit Protection Settings (Ultimate) GUI
HoneyWire: The Open-Source, Unlimited Deception Platform. Turn any Linux machine into an enterprise-grade canary in 60 seconds.
Audit and fix your Mac's security in one command. No agent, no signup, open source.
Free diagnostic security tool for Windows endpoints, featuring network utilities and device OPSEC analysis, all in one
WinLogAgent - A user-friendly, modern, and readily deployable Windows log collection client that makes it easy to forward collected logs to a SOC or SIEM.
This repository will describe the details surrounding the SIEM (wazuh) mini project, which will cover all aspects of topology design, deployment, rules, integration, and fine tune.
ShadowStrike A Windows EDR Platform
Resources for Cyber Security