How this analysis was created: This summary and feature list were written by an AI model that read the project's README and public documentation pages. Each feature links to the documentation it came from; stars, license and language come straight from the GitHub API. The model does not read the source code, and the analysis is refreshed when the project is re-analysed. Learn more on our About page.
Behavior based monitoring and hunting tool built in C# leveraging ETW tracing. Blue teamers can use this tool to detect and respond to potential Cobalt Strike beacons. Red teamers can use this tool to research ETW bypasses and discover new processes that behave like beacons.
BinaryAlert: Serverless, Real-time & Retroactive Malware Detection.
de4dot is a .NET deobfuscator, unpacker, and assembly analysis tool. It is designed to remove obfuscation layers, restore metadata, and simplify bytecode control flow to transform protected binaries back into human-readable code. The project features specialized systems for decrypting strings and constants using both static and dynamic analysis. It identifies specific protection tools through pattern-based detection and strips anti-analysis protections, such as tamper detection and anti-debugging code. The tool provides a suite of reverse engineering capabilities, including binary wrapper un
Security Onion 16.04 - Linux distro for threat hunting, enterprise security monitoring, and log management
The main features of security-onion-solutions/security-onion are: Linux Distributions, Detection and Hunting Tools, Security Education, Blue Team Tools.
Open-source alternatives to security-onion-solutions/security-onion include: danielbohannon/revoke-obfuscation. 3lp4tr0n/beaconhunter — Behavior based monitoring and hunting tool built in C# leveraging ETW tracing. Blue teamers can use this tool to… airbnb/binaryalert — BinaryAlert: Serverless, Real-time & Retroactive Malware Detection. alex/what-happens-when — This project is a collaborative knowledge base and technical learning resource that provides a detailed breakdown of… apsdehal/awesome-ctf — This project is a comprehensive directory of software utilities, frameworks, and educational resources designed for… 0xd4d/de4dot — de4dot is a .NET deobfuscator, unpacker, and assembly analysis tool. It is designed to remove obfuscation layers,…