Lightweight macOS detection agent built on Santa’s Endpoint Security telemetry.
☆116Dec 3, 2025Updated 11 months ago
Alternatives and similar repositories for santamon
Users that are interested in santamon are comparing it to the libraries listed below. We may earn a commission when you buy through links labeled 'Ad' on this page.
Sorting:
- JamfHound is a python3 project designed to collect and identify attack paths in Jamf Pro tenants based on existing object permissions by …☆139Apr 23, 2026Updated 6 months ago
- A binary and file access authorization system for macOS.☆852Updated this week
- A complete Sigma detection engineering toolkit: parser, linter, evaluator, correlation engine, conversion framework, streaming daemon, MC…☆183Updated this week
- ☆59Dec 13, 2025Updated 10 months ago
- ☆28Oct 22, 2026Updated last week
- Deploy to Railway using AI coding agents - Free Credits Offer • AdUse Claude Code, Codex, OpenCode, and more. Autonomous software development now has the infrastructure to match with Railway.
- [ARCHIVED] Public objects moved to OpenTideHQ/library☆17Sep 9, 2026Updated last month
- A public collection of detections designed to detect threats associated with the Okta WIC Platform.☆40Updated this week
- Fingerprint-aware TLS reverse proxy. Use Finch to outsmart bad traffic—collect client fingerprints (JA3, JA4 +QUIC, JA4H, HTTP/2) and act…☆320Oct 21, 2026Updated last week
- An Open Harness and Benchmark for AI in Cybersecurity Operations.☆68Updated this week
- DFIR Timeline Analysis for macOS — SQLite-backed viewer for CSV, TSV, XLSX, EVTX, Plaso, $MFT, and $J files with AI Artifacts, AI Secret …☆388Sep 8, 2026Updated last month
- ☆168Mar 31, 2026Updated 7 months ago
- machofile is a module to parse Mach-O binary files☆99Feb 10, 2026Updated 8 months ago
- Generate malware traces for detection tests☆19Oct 13, 2026Updated 3 weeks ago
- Eve is a JAMF exploitation toolkit used to interact with locally hosted JAMF servers and those hosted on jamfcloud.com.☆52Updated this week
- Deploy on Railway without the complexity - Free Credits Offer • AdConnect your repo and Railway handles the rest with instant previews. Quickly provision container image services, databases, and storage volumes.
- Anvilogic Forge☆119Mar 31, 2026Updated 7 months ago
- Cobalt Strike beacon parser and crawler☆20Oct 11, 2026Updated 3 weeks ago
- ☆13Oct 22, 2026Updated last week
- Production-ready detection & response queries for osquery☆651Updated this week
- This is the repository for AI for SOC short video series☆19Sep 12, 2025Updated last year
- PoC shadow SaaS and insecure credential detection system using a browser extension.☆44Aug 5, 2026Updated 2 months ago
- An implementation of EndpointSecurity on the 5BSD kernel.☆18May 31, 2026Updated 5 months ago
- A simple tool designed to create Atomic Red Team tests with ease.☆68May 3, 2026Updated 6 months ago
- A comprehensive framework for analyzing and defending against attacks targeting Software Development Life Cycle Infrastructure.☆185Oct 22, 2026Updated last week
- Managed hosting for WordPress and PHP on Cloudways • AdManaged hosting for WordPress, Magento, Laravel, or PHP apps, on multiple cloud providers. Deploy in minutes on Cloudways by DigitalOcean.
- CloudConqueror is a 4 parter tool, which provides simulation of utilizing AWS CloudControl API as an attack tool.☆15Oct 2, 2025Updated last year
- MCP to help Defenders Detection Engineer Harder and Smarter☆505Updated this week
- A Python-native Detection as Code Framework☆19Jan 23, 2026Updated 9 months ago
- ☆39Jul 31, 2025Updated last year
- ⚡ Rust-accelerated temporal graph engine for cybersecurity threat hunting. Ingests 100M+ edges from PCAP/CSV on a single machine. Sub-sec…☆15Jul 30, 2026Updated 3 months ago
- ☆41Jul 1, 2025Updated last year
- This JavaScript CLI "undeletes' packages that have been removed from the NPM registry☆36Oct 6, 2026Updated 3 weeks ago
- A framework for developing alerting and detection strategies for incident response.☆10Mar 26, 2024Updated 2 years ago
- A framework and taxonomy for identifying, classifying, and reasoning about detection logic bugs in SIEM, EDR, and XDR rules, with concret…☆66Updated this week
- Deploy to Railway using AI coding agents - Free Credits Offer • AdUse Claude Code, Codex, OpenCode, and more. Autonomous software development now has the infrastructure to match with Railway.
- Detection engineering with durable memory, a five-stage lifecycle, and an agentic surface — the sibling of ATHF.☆36Oct 14, 2026Updated 2 weeks ago
- Security proxy for package managers - intercepts downloads, detects known vulnerabilities and malware, and blocks risky packages before t…☆19Jun 2, 2026Updated 5 months ago
- An AWS IAM Privilege Escalation Path Library☆160Oct 16, 2026Updated 2 weeks ago
- Security preflight and guardrails for OpenClaw/Moltbot☆19Jan 30, 2026Updated 9 months ago
- ☆13Dec 15, 2025Updated 10 months ago
- ☆34Jun 12, 2024Updated 2 years ago
- An index of publicly available and open-source threat detection rulesets.☆141Apr 17, 2025Updated last year