SilentisVox / SyscallRevenant

Clean Indirect Syscalls with Syscall Tampering.

Security-Onion-Solutions / securityonion

Security Onion is a free and open platform for threat hunting, enterprise security monitoring, and log management. It includes our own interfaces for alerting, dashboards, hunting, PCAP, detections, and case management. It also includes other tools such as osquery, CyberChef, Elasticsearch, Logstash, Kibana, Suricata, and Zeek.

Velocidex / velociraptor

Digging Deeper....

rabbitstack / fibratus

Security sensor for realtime threat detection and protection

Brandon7CC / mac-monitor

"The missing ProcMon for macOS": Mac Monitor records Endpoint Security events and displays them for analysis.

zentralopensource / zentral

Zentral is a control plane for secure, observable Apple endpoints in enterprises. Configure, observe, and enforce the desired state of every Apple endpoint. Manage that desired state as code through GitOps and Terraform.

northpolesec / santa

A binary and file access authorization system for macOS.

jmpsec / osctrl

Fast and efficient osquery management

Karib0u / rustinel

Endpoint detection for Windows, Linux, and macOS. Sigma, YARA, and IOC rules on native telemetry. Written in Rust. No cloud account required.

prox0959 / CyberCodex

Autonomous 23-Source Zero-Cost OSINT, Binary Image Forensics (EXIF/GPS/Stego), Data Breach/Leak & Threat Intelligence Engine in Pure Python