Block the outbound traffic of running Windows Defender processes using the Windows Filtering Platform APIs.

An EDR server designed to monitor, detect, and respond to threats on network endpoints (POC).

A real-world, open-source Defense-in-Depth security framework built through CI/CD in production by security professionals.

Integration for Alto Cortex and Web Applications

Wazuh running on AWS

Automated Wazuh SIEM Installation & Configuration

This guide helps you with necessary information for onboarding MAC workstations on CrowdStrike Falcon using Microsoft Intune

Antivirus EDR evasion bypass for pentesters red teamers

This repository is a mirror of https://gitlab.com/sequence/core

Demonstrating use of Earthmover's Flux APIs in web apps

This project is my answer to procrastination, scattered systems, and limited tools — a unified space for personal & professional excellence. From infra to introspection. Let’s build.A personal + professional dashboard for managing tasks, infrastructure, cybersecurity tools, and life routines. All-in-one. Open source. (holoops) This might be name

Concise, hands-on Windows internals, exploitation notes and detection playbooks.

Greathelm is a modular Windows security service focused on process inspection, PowerShell telemetry, and automated response enforcement. It’s built entirely in C++ and designed for minimal dependencies, direct API usage.

ETW Notes

EDR is powerful tool combines IDS (Intrusion Detection System) and IPS (Intrusion Prevention System) capabilities into a single, efficient package. Leveraging PowerShell scripts, it continuously monitors network activity, isolates compromised machines.......

YARA signature | YARA rule for Detecting Voldemort Malware

GuardSweep is a cross-platform Endpoint Detection and Response (EDR) tool built in Python. It monitors system processes, file creation, and network connections in real-time to detect and respond to suspicious activities, helping users secure their endpoints efficiently.

A complete Purple Team home lab simulating a Sliver C2 attack on a Windows endpoint, detected and blocked using LimaCharlie EDR.

Personal Tech blog. Powered by Hugo, Markdown, Github Actions.