shellbags
fibratus
| shellbags | fibratus | |
|---|---|---|
| 1 | 46 | |
| 148 | 2,076 | |
| - | - | |
| 10.0 | 8.9 | |
| over 1 year ago | 5 days ago | |
| Python | Go | |
| Apache License 2.0 | GNU General Public License v3.0 or later |
Stars - the number of stars that a project has on GitHub. Growth - month over month growth in stars.
Activity is a relative number indicating how actively a project is being developed. Recent commits have higher weight than older ones.
For example, an activity of 9.0 indicates that a project is amongst the top 10% of the most actively developed projects that we are tracking.
shellbags
-
Awesome CTF : Top Learning Resource Labs
Shellbags - Investigate NT_USER.dat files.
fibratus
- Announcing Fibratus 2.0.0
-
Announcing Fibratus 1.10.0 - a modern Windows kernel tracing and threat detection engine
I'm thrilled to announce the availability of Fibratus 1.10.0. This release brings a set of interesting features , such as the Yara function for combining signature and behavior-based detections, expanded detection rules catalog, native grammar for sequence rules, etc.
-
Fibratus 1.10.0 - a modern Windows kernel tracing and threat detection engine built in Go
I'm happy to announce the availability of Fibratus 1.10.0. Fibratus aims at providing a high-performance engine for capturing Windows system events and asserting them against a ruleset for the purpose of detecting adversary kill chain. All rules are built on top of the prominent MITRE security framework.
- Release v1.10.0 ยท Fibratus
- Announcing fibratus 1.10.0 - a modern Windows kernel tracing and threat detection engine
- Announcing Fibratus 1.8.0 - a modern tool for Windows kernel tracing with a focus on security
-
Fibratus - a modern tool for Windows kernel tracing with a focus on threat detection and prevention
You can check the full changelog here.
- Fibratus: Open-source threat detection and prevention solution
What are some alternatives?
volatility - An advanced memory forensics framework
androguard - Reverse engineering and pentesting for Android applications
usbrip - Tracking history of USB events on GNU/Linux
space-cloud - Open source Firebase + Heroku to develop, scale and secure serverless apps on Kubernetes
UglifyJS2 - JavaScript parser / mangler / compressor / beautifier toolkit
go-financial - A go port of numpy-financial functions and more.
CyberChef - The Cyber Swiss Army Knife - a web app for encryption, encoding, compression and data analysis
Project-Lightspeed - A self contained OBS -> FTL -> WebRTC live streaming server. Comprised of 3 parts once configured anyone can achieve sub-second OBS to the browser livestreaming
bettercap - The Swiss Army knife for 802.11, BLE, IPv4 and IPv6 networks reconnaissance and MITM attacks.
OpenDiablo2 - An open source re-implementation of Diablo 2
pwntools - CTF framework and exploit development library
core - Backend server API handling user mgmt, database, storage and real-time component