Block the outbound traffic of running Windows Defender processes using the Windows Filtering Platform APIs.

An EDR server designed to monitor, detect, and respond to threats on network endpoints (POC).

A real-world, open-source Defense-in-Depth security framework built through CI/CD in production by security professionals.

Integration for Alto Cortex and Web Applications

Wazuh running on AWS

Automated Wazuh SIEM Installation & Configuration

This guide helps you with necessary information for onboarding MAC workstations on CrowdStrike Falcon using Microsoft Intune

Antivirus EDR evasion bypass for pentesters red teamers

The goal of this project is to implement core functionalities of an EDR device using a PIC based microcontroller.

YARA signature | YARA rule for Detecting Voldemort Malware

EDR is powerful tool combines IDS (Intrusion Detection System) and IPS (Intrusion Prevention System) capabilities into a single, efficient package. Leveraging PowerShell scripts, it continuously monitors network activity, isolates compromised machines.......

This repository is a mirror of https://gitlab.com/sequence/core

Demonstrating use of Earthmover's Flux APIs in web apps

Greathelm is a modular Windows security service focused on process inspection, PowerShell telemetry, and automated response enforcement. It’s built entirely in C++ and designed for minimal dependencies, direct API usage.

ETW Notes

This project is my answer to procrastination, scattered systems, and limited tools — a unified space for personal & professional excellence. From infra to introspection. Let’s build.A personal + professional dashboard for managing tasks, infrastructure, cybersecurity tools, and life routines. All-in-one. Open source. (holoops) This might be name

Concise, hands-on Windows internals, exploitation notes and detection playbooks.

Personal Tech blog. Powered by Hugo, Markdown, Github Actions.

LLM AI EDR 백엔드

Remotely predicts identifies the presence of EDR/XDR solutions on networks