Elkeid is an open source solution that can meet the security requirements of various workloads such as hosts, containers and K8s, and serverless. It is derived from ByteDance's internal best practices.

Adversary tradecraft detection, protection, and hunting

Open Source EDR for Windows

Adversary emulation for EDR/SIEM testing (macOS/Linux)

用Go编写的轻量文件监控器. 可以监控终端上指定文件夹内的变化, 阻止删除,修改,新增操作. 可以用于AWD比赛或者终端应急响应

A tool to run and validate telemetry for Atomic Red Team tests

Whenever PowerShell is launched, Notepad will also open. You can customize the script for educational purposes, but I emphasize that I do not take any responsibility for its use or any actions taken.

Jibril Runtime Security Public Types. Important for unmarshalling events and similar needs.

Remotely predicts identifies the presence of EDR/XDR solutions on networks

Network-Monitor con IA es una solución inteligente que supervisa redes en tiempo real, analiza tráfico y rendimiento, detecta anomalías y amenazas con machine learning, optimiza recursos y emite alertas precisas. Permite gestión proactiva, predicción de fallos y mayor seguridad, estabilidad y visibilidad en la infraestructura digital

Network-Monitor with AI is an intelligent solution that monitors networks in real time, analyzes traffic and performance, detects anomalies and threats with machine learning, optimizes resources, and issues accurate alerts. It enables proactive management, fault prediction, and greater security, stability, and visibility into digital infrastructure

A Flexible security tool which enables SecOps teams to collect custom telemetry.