Sigma Rules Engine inside the Linux Kernel using eBPF. Focusing on prevention capabilities
☆281Aug 22, 2026Updated last week
Alternatives and similar repositories for owLSM
Users that are interested in owLSM are comparing it to the libraries listed below. We may earn a commission when you buy through links labeled 'Ad' on this page.
Sorting:
- An idiomatic Rust mutex type for Windows kernel driver development.☆15Jan 24, 2026Updated 7 months ago
- Anvil is a runtime-first attack surface assessment tool for Windows thick client applications, built for penetration testers and security…☆37Mar 16, 2026Updated 5 months ago
- XDP Based Lightweight and Fast Firewall☆71Feb 23, 2026Updated 6 months ago
- ClickDetect is a vendor-agnostic alerting framework for threshold-based detection. It works with ClickHouse, OpenSearch/Elasticsearch, Vi…☆52Aug 23, 2026Updated last week
- Sandbox samples and monitor them with kunai☆29Jul 21, 2026Updated last month
- 1-Click AI Models by DigitalOcean Gradient • AdDeploy popular AI models on DigitalOcean Gradient GPU virtual machines with just a single click. Zero configuration with optimized deployments.
- Run TTPs, with AI!☆141Feb 23, 2026Updated 6 months ago
- MAD-CAT (Meow Attack Data Corruption Automation Tool) is a comprehensive security tool designed to simulate data corruption attacks again…☆38Oct 11, 2025Updated 10 months ago
- Hunt Smarter, Hunt Harder☆200Mar 14, 2026Updated 5 months ago
- CyberChef - Detection Engineering, TI, DFIR, Malware Analysis Edition☆66Jun 18, 2026Updated 2 months ago
- A Kubernetes Forensic Collection Framework for Azure Kubernetes Service☆44Feb 9, 2026Updated 6 months ago
- Bypassing EDR's with stealthy c++ telegram Bot and Telegram itself as C2 interface !☆44Mar 24, 2026Updated 5 months ago
- ☆13Sep 22, 2022Updated 3 years ago
- eBPF Security Monitoring and Sandboxing Agent Based on Aya☆58Aug 24, 2026Updated last week
- Yara Based Detection Engine for web browsers☆50Sep 5, 2021Updated 4 years ago
- Wordpress hosting with auto-scaling - Free Trial Offer • AdFully Managed hosting for WordPress and WooCommerce businesses that need reliable, auto-scalable performance. Cloudways SafeUpdates now available.
- A lightweight, multi-layer Linux sandbox combining namespaces, pivot_root, seccomp-bpf, capability dropping, and an evidence-based verdic…☆74Updated this week
- surface-watch monitors the authorized external attack surface of an organization over time☆55May 11, 2026Updated 3 months ago
- An extensible, deterministic static‑analysis engine that extracts high‑signal IOCs from PE binaries and text, built for SOC automation an…☆29Updated this week
- The MAGIC tool is a wrapper around the Microsoft Graph Python SDK, designed to download incident response-relevant data from M365 environ…☆35Apr 13, 2026Updated 4 months ago
- Deterministic Linux runtime enforcement with eBPF LSM: block file/network operations before syscalls complete.☆18Updated this week
- A VS Code plugin to execute arbitrary JavaScript code at runtime over a local HTTP endpoint.☆34Feb 10, 2026Updated 6 months ago
- .NET process monitor that hooks CLR at the native layer, dumps reflective assemblies from memory, and checks AMSI/ETW integrity vs on dis…☆41Jul 13, 2026Updated last month
- Extensible MacOS system telemetry generator.☆65Updated this week
- Open-source cross-platform endpoint detection engine for Windows, macOS, and Linux using ETW, ESF, eBPF, Sigma, YARA, IOCs, and ECS NDJSO…☆459Updated this week
- End-to-end encrypted email - Proton Mail • AdSpecial offer: 40% Off Yearly / 80% Off First Month. All Proton services are open source and independently audited for security.
- ☆34Aug 8, 2023Updated 3 years ago
- Sanctum is an experimental proof-of-concept EDR, designed to detect modern malware techniques, above and beyond the capabilities of antiv…☆569Mar 24, 2026Updated 5 months ago
- Offset Independent Credential Extraction Tool☆66Sep 2, 2025Updated 11 months ago
- Linux Persistence Detection, Hunting and Artifact Collection script☆25Jul 20, 2026Updated last month
- Work In Progress☆10Jul 10, 2024Updated 2 years ago
- A Linux kernel integrity scanner☆17May 2, 2026Updated 3 months ago
- Jailer is an eBPF-based process jailing system that provides mandatory access control (MAC) for Linux. It tracks processes using BPF task…☆59Updated this week
- Microsoft Vulnerable Driver Block Lists in CSV and JSON for SIEM lookups☆55May 15, 2026Updated 3 months ago
- Self-hosted AI-assisted CTI-to-detection workbench for ATT&CK mapping, IOC/CVE intelligence, Threat Radar, malware triage, Attack Simulat…☆27Updated this week
- Serverless GPU API endpoints on Runpod - Get Bonus Credits • AdSkip the infrastructure headaches. Auto-scaling, pay-as-you-go, no-ops approach lets you focus on innovating your application.
- COM Windows Persistence Technique☆90Apr 27, 2026Updated 4 months ago
- ☆17Jul 23, 2024Updated 2 years ago
- A PoC Cobalt Strike UDRL written in Rust☆34Jun 20, 2026Updated 2 months ago
- A comprehensive ETW (Event Tracing for Windows) event generation tool designed for testing and research purposes.☆281Sep 23, 2025Updated 11 months ago
- Post-exploitation framework that abuses trusted sites like Telegram and Discord for C2.☆70Apr 24, 2026Updated 4 months ago
- Zero-dependency Linux memory forensics, leveraging kernel-embedded BTF and kallsyms for type-aware memory analysis without external debug…☆184Updated this week
- Yet, Another Packer/Loader☆25Feb 26, 2023Updated 3 years ago