Lightweight macOS detection agent built on Santa’s Endpoint Security telemetry.
☆116Dec 3, 2025Updated 10 months ago
Alternatives and similar repositories for santamon
Users that are interested in santamon are comparing it to the libraries listed below. We may earn a commission when you buy through links labeled 'Ad' on this page.
Sorting:
- JamfHound is a python3 project designed to collect and identify attack paths in Jamf Pro tenants based on existing object permissions by …☆138Apr 23, 2026Updated 5 months ago
- A binary and file access authorization system for macOS.☆830Updated this week
- ☆59Dec 13, 2025Updated 10 months ago
- [ARCHIVED] Public objects moved to OpenTideHQ/library☆17Sep 9, 2026Updated last month
- A public collection of detections designed to detect threats associated with the Okta WIC Platform.☆39Sep 8, 2026Updated last month
- GPU virtual machines on DigitalOcean Gradient AI • AdGet to production fast with high-performance AMD and NVIDIA GPUs you can spin up in seconds. The definition of operational simplicity.
- Fingerprint-aware TLS reverse proxy. Use Finch to outsmart bad traffic—collect client fingerprints (JA3, JA4 +QUIC, JA4H, HTTP/2) and act…☆308Dec 6, 2025Updated 10 months ago
- A complete Sigma detection engineering toolkit: parser, linter, evaluator, correlation engine, conversion framework, streaming daemon, MC…☆167Updated this week
- ☆164Mar 31, 2026Updated 6 months ago
- Anvilogic Forge☆119Mar 31, 2026Updated 6 months ago
- machofile is a module to parse Mach-O binary files☆99Feb 10, 2026Updated 8 months ago
- Eve is a JAMF exploitation toolkit used to interact with locally hosted JAMF servers and those hosted on jamfcloud.com.☆50May 1, 2026Updated 5 months ago
- An implementation of EndpointSecurity on the 5BSD kernel.☆17May 31, 2026Updated 4 months ago
- Cobalt Strike beacon parser and crawler☆20Updated this week
- A simple tool designed to create Atomic Red Team tests with ease.☆66May 3, 2026Updated 5 months ago
- Proton VPN Special Offer - Get 70% off • AdSpecial partner offer. Trusted by over 100 million users worldwide. Tested, Approved and Recommended by Experts.
- This is the repository for AI for SOC short video series☆19Sep 12, 2025Updated last year
- MCP to help Defenders Detection Engineer Harder and Smarter☆498Jun 16, 2026Updated 3 months ago
- CloudConqueror is a 4 parter tool, which provides simulation of utilizing AWS CloudControl API as an attack tool.☆15Oct 2, 2025Updated last year
- PoC shadow SaaS and insecure credential detection system using a browser extension.☆44Aug 5, 2026Updated 2 months ago
- A Python-native Detection as Code Framework☆19Jan 23, 2026Updated 8 months ago
- A framework and taxonomy for identifying, classifying, and reasoning about detection logic bugs in SIEM, EDR, and XDR rules, with concret…☆64Sep 28, 2026Updated 2 weeks ago
- ☆39Jul 31, 2025Updated last year
- This JavaScript CLI "undeletes' packages that have been removed from the NPM registry☆35Oct 6, 2026Updated last week
- Extensible MacOS system telemetry generator.☆72Sep 15, 2026Updated last month
- Serverless GPU API endpoints on Runpod - Get Bonus Credits • AdSkip the infrastructure headaches. Auto-scaling, pay-as-you-go, no-ops approach lets you focus on innovating your application.
- ☆42Jul 1, 2025Updated last year
- Generate malware traces for detection tests☆19Updated this week
- ☆34Jun 12, 2024Updated 2 years ago
- Open source tooling to stop ICS phishing (malicious calendar invites)☆20Feb 24, 2026Updated 7 months ago
- Bash tool used for proactive detection of malicious activity on macOS systems.☆40Sep 29, 2025Updated last year
- Random scripts for azure stuff☆15Oct 12, 2022Updated 4 years ago
- Check your AWS CLI commands for security risks before you run them.☆34Apr 1, 2026Updated 6 months ago
- An index of publicly available and open-source threat detection rulesets.☆141Apr 17, 2025Updated last year
- Security preflight and guardrails for OpenClaw/Moltbot☆19Jan 30, 2026Updated 8 months ago
- Deploy on Railway without the complexity - Free Credits Offer • AdConnect your repo and Railway handles the rest with instant previews. Quickly provision container image services, databases, and storage volumes.
- Detonate redteam tools on VMs and get logs & detection status☆108Sep 27, 2026Updated 2 weeks ago
- An OpenAI API Compatible Honeypot Gateway☆27Mar 17, 2025Updated last year
- Production-ready detection & response queries for osquery☆648Jun 26, 2026Updated 3 months ago
- Audit content (pdfs, media files, images) sensitivity on urls☆45Jun 2, 2026Updated 4 months ago
- Vagrant Files to create a Virtualbox VM for Malware Analysis☆13Jun 1, 2021Updated 5 years ago
- A multi-platform CI/CD vulnerability detection and attack automation tool for identifying security weaknesses in pipeline configurations.☆195Updated this week
- A local-first web interface for managing Tart VMs on Apple Silicon macOS.☆20Mar 15, 2026Updated 7 months ago