Generates kernel patch for CamFlow Linux Provenance Capture.
☆29Jan 30, 2024Updated 2 years ago
Alternatives and similar repositories for camflow-dev
Users that are interested in camflow-dev are comparing it to the libraries listed below
Sorting:
- ☆14Mar 2, 2021Updated 5 years ago
- Public Arena dataset☆14Jul 20, 2022Updated 3 years ago
- System Audit Architecture with High Event Coverage and Synchronous Log Availability☆19Nov 27, 2024Updated last year
- ☆102Nov 26, 2020Updated 5 years ago
- eAudit suite for recording provenance-related system calls on Linux☆20Jan 16, 2026Updated 2 months ago
- A framework for building provenance-based intrusion detection systems with neural networks☆84Mar 6, 2026Updated 2 weeks ago
- SHADEWATCHER: Recommendation-guided Cyber Threat Analysis using System Audit Records, Oakland'22☆83Jun 6, 2023Updated 2 years ago
- ☆27Dec 10, 2021Updated 4 years ago
- Builds Data Provenance Graph for Multi-Threaded Programms using tthread and Intel Pt.☆14Jun 3, 2016Updated 9 years ago
- Material from the DARPA Transparent Computing Program☆229Apr 29, 2020Updated 5 years ago
- SPADE: Support for Provenance Auditing in Distributed Environments☆194Mar 6, 2026Updated 2 weeks ago
- APT-KGL: An Intelligent APT Detection System Based on Threat Knowledge and Heterogeneous Provenance Graph Learning☆78Jul 8, 2022Updated 3 years ago
- GraphChi's C++ version. Big Data - small machine.☆17Nov 29, 2020Updated 5 years ago
- ☆124May 3, 2023Updated 2 years ago
- A framework for synthesizing lateral movement login data.☆27May 20, 2021Updated 4 years ago
- ☆15Mar 31, 2019Updated 6 years ago
- CTINexus is a framework that leverages optimized in-context learning of LLMs to enable data-efficient extraction of cyber threat intellig…☆71Feb 25, 2026Updated 3 weeks ago
- A framework for streamlining the capture of PANDA execution traces.☆57Jun 16, 2020Updated 5 years ago
- ☆87Feb 24, 2025Updated last year
- Ansible playbooks for ISUCON9 quals☆10Sep 8, 2019Updated 6 years ago
- Codes and data for USENIX Security 24 paper "MAGIC: Detecting Advanced Persistent Threats via Masked Graph Representation Learning"☆135Oct 24, 2024Updated last year
- ATLAS: A Sequence-based Learning Approach for Attack Investigation☆175Sep 3, 2022Updated 3 years ago
- Official code for "Algorithmic Capabilities of Random Transformers" (NeurIPS 2024)☆16Sep 28, 2024Updated last year
- Spring-Cloud-Spel-RCE☆12Sep 16, 2022Updated 3 years ago
- Datasets used in the StreamSpot experiments☆65Feb 18, 2016Updated 10 years ago
- Cobalt Strike 的 CVE-2024-35250 的 BOF。(请给我加个星，谢谢。)☆13Oct 21, 2024Updated last year
- ☆21Oct 31, 2020Updated 5 years ago
- ☆18Oct 1, 2025Updated 5 months ago
- ☆19Nov 27, 2023Updated 2 years ago
- Artefacts for Survivalism: Systematic Analysis of Windows Malware Living-Off-The-Land☆11Jul 7, 2021Updated 4 years ago
- Library of ML-based attribution methods for ICS anomaly detection. From the NDSS 2024 paper: "Attributions for ML-based ICS anomaly detec…☆20Aug 31, 2023Updated 2 years ago
- Control-Flow Integrity implementation for the Linux Kernel 3.19☆22Feb 19, 2020Updated 6 years ago
- Core streaming heterogeneous graph clustering and anomaly detection code (KDD 2016)☆42Apr 23, 2020Updated 5 years ago
- Have fun with audit log analysis :)☆155May 5, 2024Updated last year
- A curated list of fuzzing resources ( Books, courses - free and paid, videos, tools, tutorials and vulnerable applications to practice on…☆12Jul 7, 2024Updated last year
- Original implementation and resources of DeepCASE as in the S&P '22 paper☆98Aug 1, 2023Updated 2 years ago
- network security named entity recognition, Chinese☆11Aug 27, 2019Updated 6 years ago
- Source code of AsiaCCS'22 paper - RecIPE: Revisiting the Evaluation of Memory Error Defenses☆13Sep 19, 2023Updated 2 years ago
- 碩論：基於Word2Vec之熱門主題偵測☆11Oct 24, 2017Updated 8 years ago