endpoint-detection-response

A framework and build automation tool to process exploits/payloads to evade antivirus and endpoint detection response products using reusable building-blocks like encryption or obfuscation. Mirrors: https://gitlab.com/0xCCF4/expkit . Create issues and merge request on gitlab.

Library and command line tool for interacting with Carbon Black environments.

Full-stack Endpoint Detection & Response (EDR) system with real-time threat detection, active remediation, CNN-LSTM ML classification, and centralized security console.

Host-based Endpoint Detection & Response (EDR) proof-of-concept using machine learning and explainable AI for realtime threat monitoring.

Uses the Damerau-Levenshtein distance to find suspicious tasks running on endpoints in Windows.

Python-based Endpoint Detection and Response (EDR) prototype that monitors system processes, detects suspicious behavior, and generates incident response reports.