Block the outbound traffic of running Windows Defender processes using the Windows Filtering Platform APIs.

An EDR server designed to monitor, detect, and respond to threats on network endpoints (POC).

A real-world, open-source Defense-in-Depth security framework built through CI/CD in production by security professionals.

Integration for Alto Cortex and Web Applications

Wazuh running on AWS

Automated Wazuh SIEM Installation & Configuration

This guide helps you with necessary information for onboarding MAC workstations on CrowdStrike Falcon using Microsoft Intune

This project is my answer to procrastination, scattered systems, and limited tools — a unified space for personal & professional excellence. From infra to introspection. Let’s build.A personal + professional dashboard for managing tasks, infrastructure, cybersecurity tools, and life routines. All-in-one. Open source. (holoops) This might be name

EDR is powerful tool combines IDS (Intrusion Detection System) and IPS (Intrusion Prevention System) capabilities into a single, efficient package. Leveraging PowerShell scripts, it continuously monitors network activity, isolates compromised machines.......

GuardSweep is a cross-platform Endpoint Detection and Response (EDR) tool built in Python. It monitors system processes, file creation, and network connections in real-time to detect and respond to suspicious activities, helping users secure their endpoints efficiently.

A complete Purple Team home lab simulating a Sliver C2 attack on a Windows endpoint, detected and blocked using LimaCharlie EDR.

Personal Tech blog. Powered by Hugo, Markdown, Github Actions.

LLM AI EDR 백엔드

The goal of this project is to implement core functionalities of an EDR device using a PIC based microcontroller.

Documentation and configuration examples from my cybersecurity homelab. Projects include SIEM, firewalls, and endpoint monitoring.

This lab is inspired by concepts and guidance from Josh Madakor’s Cyber Range course.

Remotely predicts identifies the presence of EDR/XDR solutions on networks

Summary: The Cybersecurity and Infrastructure Security Agency CISA leads the national effort to understand, manage, and reduce risk to our cyber and physical infrastructure. In response to the Russian Invasion of Ukraine, CISA has been closely monitoring the increased malicious cyber activity and has developed strategies to help mitigate the ris…