androguard VS fibratus

Androguard - Reverse engineer Android applications.

I'm excited to announce a new release of Fibratus - a tool for Windows kernel tracing and exploration focusing on runtime threat detection and prevention. Starting from this version, Fibratus is distributed with a catalog of detection rules built on top of the industry-recognized MITRE ATT&ACK framework. This initial catalog is focused on credential access, defense evasion, and initial access tactics. Still, the goal is to engage the community and security engineers who would help evolve and expand the catalog. Detection rules generate alerts and send them over a variety of notification channels, including email and Slack. Email rule alerts are turned into beautiful responsive HTML designs, as depicted in this image.

I've implemented a CPython wrapper to interact with the embedded Python interpreter. https://github.com/rabbitstack/fibratus/tree/master/pkg/filament/cpython

CPython bindings to spawn a full-fledged Python interpreter and permit interaction with the PVM. https://github.com/rabbitstack/fibratus/blob/master/pkg/filament/filament.go

If you have affinity for systems programming and security, https://github.com/rabbitstack/fibratus may be of your interest. I would be happy to mentor if needed.

If you're into security, threat detection and systems programming, fibratus may be a good fit. I would be happy to mentor and hand hold.

Fibratus - Tool for exploration and tracing of the Windows kernel.

I'm happy to announce fibratus 1.2.0 is out! This release brings some interesting features including DNS reverse lookups, function support in filters, new operators, and MSI-based installers among other changes and improvements. Here is the full changelog.

I'm happy to announce fibratus 1.2.0 is released. Fibratus is a tool for Windows kernel tracing and observability.