Elkeid is an open source solution that can meet the security requirement...
A modern tool for Windows kernel exploration and tracing with a focus on...
An Active Defense and EDR software to empower Blue Teams
Open Source EDR for Windows
Little user-mode AV/EDR evasion lab for training & learning purposes
Enumerate and disable common sources of telemetry used by AV/EDR.
Evasive shellcode loader for bypassing event-based injection detection (...
iMonitor（冰镜 - 终端行为分析系统）
a tool to help operate in EDRs' blind spots
Cobalt Strike script for ScareCrow payloads intergration (EDR/AV evasion)
戎码之眼是一个window上的基于att&ck模型的威胁监控工具.有效检测常见的未知...
Threat Hunting query in Microsoft 365 Defender, XDR. Provide out-of-the-...
系统监控开发套件（sysmon、procmon、edr、终端安全、主机安全、零信任、上网...
Security product hook detection
Replace the .txt section of the current loaded modules from \KnownDlls\ ...