In the era of Generative AI, the data is the primary attack surface. This module focuses on securing the ML data pipeline from ingestion to vector storage, ensuring that the foundation of the AI model remains uncompromised and privacy-compliant.
A highly actionable, curated list of open-source tools and practical use cases leveraging AI, ML, and LLMs to solve complex information security challenges. This module bridges the gap between theoretical AI capabilities and daily security operations.
A highly technical forensic and architectural guide. This module details exactly how AI-specific attacks manifest in system telemetry, followed by the rigorous, defense-in-depth security controls required to neutralize them.
Traditional threat modeling frameworks (like STRIDE) fail to capture the probabilistic nature of neural networks. This module explores specialized frameworks and repositories required to systematically identify and assess risks in AI systems before they reach production.
This repository is a consolidated directory divided into five standalone, deep-dive modules. Each module comprehensively covers a specific domain of AI implementation, vulnerabilities, threat modeling, and automated defense mechanisms.
Harden Windows Safely, Securely using Official Supported Microsoft methods and proper explanation | Always up-to-date and works with the latest build of Windows | Provides tools and Guides for Personal, Enterprise, Government and Military security levels | SLSA Level 3 Compliant for Secure Development and Build Process | Apps Available on MS Storeβ¨
Sculpted and curved keycaps for Kailh Choc and MX switches
Welcome to the Microsoft Defender for Cloud community repository
Useful Techniques, Tactics, and Procedures for red teamers and defenders, alike!
Portable Tool for an Ideal Windows Setup
KQL Queries. Defender For Endpoint and Azure Sentinel Hunting and Detection Queries in KQL. Out of the box KQL queries for: Advanced Hunting, Custom Detection, Analytics Rules & Hunting Rules.
Utility for configuring Windows 10 built-in Defender antivirus settings.
a collection about Windows 11
bddisasm is a fast, lightweight, x86/x64 instruction decoder. The project also features a fast, basic, x86/x64 instruction emulator, designed specifically to detect shellcode-like behavior.
KQL Queries. Microsoft Defender, Microsoft Sentinel
A repository of KQL queries focused on threat hunting and threat detecting for Microsoft Sentinel & Microsoft XDR (Former Microsoft 365 Defender).
Attack Flow helps executives, SOC managers, and defenders easily understand how attackers compose ATT&CK techniques into attacks by developing a representation of attack flows, modeling attack flows for a small corpus of incidents, and creating visualization tools to display attack flows.
OpenAnt from Knostic is the leading open source LLM-based vulnerability discovery and remediation product, helping defenders proactively find and patch verified security flaws while minimizing both false positives and negatives. Stage 1 detects. Stage 2 attacks. What survives is real.
Depth Based 3D & Other post-process shaders
E-Mail Header Analyzer
Caddy module to block or manipulate requests originating from AIs or cloud services trying to train on your websites
Bypass SmartScreen! Use a signed executable as the launcher to reduce Microsoft Defender SmartScreen warnings when running your code. You do not need to sign the executable itself, only the DLL.
Local Windows security auditing and reversible hardening with a C#/.NET Framework 4.8 core and CMD/BAT entry points.
Offensive security research in Windows COM. Techniques for pentesters, red teamers, and defenders across the full attack lifecycle: recon, initial access, privilege escalation, lateral movement, persistence, and defense.
A payload injector for the Nintendo Switch that aims to cover all user platforms.
How to Register your own AV with Defender
M365 PowerShell scripts for Microsoft 365 administration: Intune, Entra ID, Defender, Exchange Online, Purview, Teams, SharePoint and tenant management. Microsoft Graph and modern modules only, read-only by default, -WhatIf on every change, full comment-based help.
Triage de seguridad para Windows (procesos, red, tareas programadas, persistencia, Windows Defender) con veredicto en lenguaje simple. 100% portable, open-source friendly, creada por @kobasky para su comunidad.
See why a web vulnerability works, not just how to trigger it β a single-file, zero-dependency security lab that renders a vulnerable app as a 7-layer cross-section. 17 labs, attacker & defender modes, AI-authorable.