Always-on, cross-platform telemetry daemon for AI agent activity. Sysmon for AI agents.
☆61Jul 28, 2026Updated 2 months ago
Alternatives and similar repositories for aten
Users that are interested in aten are comparing it to the libraries listed below. We may earn a commission when you buy through links labeled 'Ad' on this page.
Sorting:
- Adversarial Detection Engineering knowledge base — ADE taxonomy, worked technique files, platform bug patterns, mitigations, and purple-t…☆81Sep 30, 2026Updated 2 weeks ago
- EntraTrace is a defensive security research tool for tracking and identifying the behavior of offensive tooling targeting Microsoft Entra…☆122Updated this week
- hunt.md: an open, plain-text format for threat hunts. Spec, examples and tooling.☆41Sep 20, 2026Updated 3 weeks ago
- A threat hunting process☆142Oct 2, 2026Updated 2 weeks ago
- EAA is a curated catalog of techniques and real-world cases involving abuse of local AI agents through their runtime, configuration, stat…☆94Oct 3, 2026Updated 2 weeks ago
- AI Agents on DigitalOcean Gradient AI Platform • AdBuild production-ready AI agents using customizable tools or access multiple LLMs through a single endpoint. Create custom knowledge bases or connect external data.
- Framework-agnostic log sanitizer for browsers and Node.js. Redacts secrets and infrastructure identifiers with stable HMAC tokens so even…☆22Sep 23, 2026Updated 3 weeks ago
- A Windows userland tool to enumerate and classify ALPC ports, including PPL-protected processes.☆31Aug 12, 2026Updated 2 months ago
- Multi-EDR & SIEM mock server. SentinelOne, CrowdStrike, Defender, Elastic, Cortex XDR, Splunk, M365 and Sentinel — 8 platforms in one pro…☆55Updated this week
- A defensive decompilation layer: Ghidra facts, lifted into runnable Python & artifacts aiding analysis.☆16Aug 7, 2026Updated 2 months ago
- A framework for creating COM-based bypasses utilizing vulnerabilities in Microsoft's WDAPT sensors.☆16Apr 4, 2023Updated 3 years ago
- ☆12Feb 26, 2025Updated last year
- Blacklight is a cross-platform toolkit for mapping, analyzing, and understanding the local AI agent attack surface across Windows, macOS,…☆88Updated this week
- Files for http://blog.deniable.org/posts/windows-callbacks/☆12Jan 1, 2023Updated 3 years ago
- Ask the Web Account Manager (WAM) for Entra ID tokens☆162Sep 11, 2026Updated last month
- Deploy on Railway without the complexity - Free Credits Offer • AdConnect your repo and Railway handles the rest with instant previews. Quickly provision container image services, databases, and storage volumes.
- A lexer and parser for Sleep☆21Feb 20, 2026Updated 7 months ago
- An i3-like tiling window manager for macOS — tree layout, instant virtual workspaces, TOML config, and a settings GUI. Fork of AeroSpace.☆36Sep 13, 2026Updated last month
- Detection-aware BloodHound attack-path scoring - the quietest route to your objective, calibrated across five detection tiers (audit/EDR/…☆67Aug 22, 2026Updated last month
- ☆37Apr 22, 2026Updated 5 months ago
- A production-ready, enterprise-grade MDR framework that transforms chaotic security alerts into structured, actionable intelligence.☆27Feb 14, 2026Updated 8 months ago
- Jevline: start from one confirmed-malicious process; Jev links the rest of the incident into a timeline, execution chain and evidence tab…☆41Updated this week
- Windows Portable Device COM BOF☆17Mar 30, 2026Updated 6 months ago
- Pass-the-Passkey Family of Attacks☆233Sep 14, 2026Updated last month
- PowerShell tool to deploy deceptive Active Directory objects, and audit them☆16Jan 7, 2026Updated 9 months ago
- Deploy on Railway without the complexity - Free Credits Offer • AdConnect your repo and Railway handles the rest with instant previews. Quickly provision container image services, databases, and storage volumes.
- A vendor-neutral collection of Sigma, YARA, and Suricata rules for detecting compromise of LLM applications, MCP servers, ML supply chain…☆113Updated this week
- Dumping LSA secrets: a story about task decorrelation☆15Jul 9, 2024Updated 2 years ago
- Modified-Thycotic-Secret-Stealer for use with DPAPI and offline Decryption☆19Aug 5, 2022Updated 4 years ago
- Library that provides Python examples for interacting with the Cobalt Strike REST API☆25Nov 26, 2025Updated 10 months ago
- A collector and derivation engine. It maps your environment, evaluates effective permissions and trust, and writes a complete attack grap…☆84Sep 15, 2026Updated last month
- An advanced data pipeline engine for the BloodHound OpenGraph framework☆19Apr 11, 2026Updated 6 months ago
- ANIMO Azure Network Intel & Mission Ops a C2 based on Azure/Entra assessments☆93Sep 16, 2026Updated last month
- Deployment of an Active Directory Tier Model structure to support Tier 0, Tier 1, and Tier 2 objects.☆413Updated this week
- Runtime vulnerability scanner: finds CVEs in the services actually running on a host and ranks them by network exposure.☆60Aug 25, 2026Updated last month
- AI Agents on DigitalOcean Gradient AI Platform • AdBuild production-ready AI agents using customizable tools or access multiple LLMs through a single endpoint. Create custom knowledge bases or connect external data.
- APISignature is a plugin for x64dbg that help the malware analysts & reverse engineers during analysis by adding a reference for more tha…☆38Aug 15, 2026Updated 2 months ago
- Automate Checkmarx Scanning and Onboarding Plus AWS Access☆12Jan 5, 2023Updated 3 years ago
- A Fast, Modular, and Scalable TLS/SSL Security Scanner Written in Rust☆38Updated this week
- An OpenGraph extension for secrets☆23Aug 11, 2026Updated 2 months ago
- ☆22Aug 14, 2026Updated 2 months ago
- One-header configurable C++20 COFF loader☆20Jul 21, 2025Updated last year
- Build a custom Linux kernel with a full eBPF feature set (BTF, struct_ops/sched_ext, tracing, netem, BPF LSM, AF_XDP) and run it under Ap…☆25Updated this week