OSSEC is an Open Source Host-based Intrusion Detection System that performs log analysis, file integrity checking, policy monitoring, rootkit detection, real-time alerting and active response.

Generates x86, x64, or AMD64+x86 position-independent shellcode that loads .NET Assemblies, PE files, and other Windows payloads from memory and runs them with parameters

A Linux version of the ProcDump Sysinternals tool

Resources related to GitHub Security Lab

QNSM is network security monitoring framework based on DPDK.

dlopen from memory

C++

LibSharedMemoryObject provides a simple API to load from memory shared library on both Linux (.so) and Windows (.dll)

Various dll hollowing techniques