endpoint-detection-response

Security sensor for realtime threat detection and protection

Sanctum is an experimental proof-of-concept EDR, designed to detect modern malware techniques, above and beyond the capabilities of antivirus. Built in Rust.

Tool that gathers a customizable set of ETW telemetry and generates user-defined detections

Panoptes Endpoint Detection and Response Solution

enpoint detection / live analysis & sandbox host / signatures quality test

Symantec EDR Internals

A framework and build automation tool to process exploits/payloads to evade antivirus and endpoint detection response products using reusable building-blocks like encryption or obfuscation. Mirrors: https://gitlab.com/0xCCF4/expkit . Create issues and merge request on gitlab.

On a scale of one to America, this NextGen Norton Antivirus EDR just made enterprise-grade defense free. Built by a Norton, carrying forward a name rooted in cybersecurity history, reimagined for modern threats.

Library and command line tool for interacting with Carbon Black environments.

Full-stack Endpoint Detection & Response (EDR) system with real-time threat detection, active remediation, CNN-LSTM ML classification, and centralized security console.

Host-based Endpoint Detection & Response (EDR) proof-of-concept using machine learning and explainable AI for realtime threat monitoring.

Talks and lectures I've delivered.

Uses the Damerau-Levenshtein distance to find suspicious tasks running on endpoints in Windows.

multi arch os osquery travisci pipeline python virtuenv

Python-based Endpoint Detection and Response (EDR) prototype that monitors system processes, detects suspicious behavior, and generates incident response reports.

Collection of scripts for Fidelis CyberSecurity EDR

Iru — independent third-party profile of a public API surface, by API Evangelist. Iru (formerly Kandji) is a San Francisco based endpoint management and security company whose AI-powered platform unifies workforce identity and access, cross-platform endpoint management for macOS, iOS, iPadOS, tvOS, visionOS, Windows and Android, endpoint detection