SilentisVox / SyscallRevenant

Clean Indirect Syscalls with Syscall Tampering.

Velocidex / velociraptor

Digging Deeper....

Karib0u / rustinel

Endpoint detection for Windows, Linux, and macOS. Sigma, YARA, and IOC rules on native telemetry. Written in Rust. No cloud account required.

northpolesec / santa

A binary and file access authorization system for macOS.

Security-Onion-Solutions / securityonion

Security Onion is a free and open platform for threat hunting, enterprise security monitoring, and log management. It includes our own interfaces for alerting, dashboards, hunting, PCAP, detections, and case management. It also includes other tools such as osquery, CyberChef, Elasticsearch, Logstash, Kibana, Suricata, and Zeek.

rabbitstack / fibratus

Security sensor for realtime threat detection and protection

jmpsec / osctrl

Fast and efficient osquery management

Brandon7CC / mac-monitor

"The missing ProcMon for macOS": Mac Monitor records Endpoint Security events and displays them for analysis.

zentralopensource / zentral

Zentral is a control plane for secure, observable Apple endpoints in enterprises. Configure, observe, and enforce the desired state of every Apple endpoint. Manage that desired state as code through GitOps and Terraform.

prox0959 / CyberCodex

Autonomous 23-Source Zero-Cost OSINT, Binary Image Forensics (EXIF/GPS/Stego), Data Breach/Leak & Threat Intelligence Engine in Pure Python