Detection Engineering Tools
☆39Sep 29, 2026Updated last week
Alternatives and similar repositories for Detection_Engineering_Tools
Users that are interested in Detection_Engineering_Tools are comparing it to the libraries listed below. We may earn a commission when you buy through links labeled 'Ad' on this page.
Sorting:
- BOF to terminate a process via PID as argument☆27Sep 7, 2025Updated last year
- Windows Access token manipulation tool made in C#☆25Aug 24, 2025Updated last year
- Плагин для декомпиляции и переименования функции в понятный человеку вид с помощью DeepSeekAI. Плагин тестировался только на ida9☆22Sep 3, 2025Updated last year
- RE for champions☆18Sep 22, 2026Updated 2 weeks ago
- Python bindings for the Icicle emulator.☆43Nov 6, 2025Updated 11 months ago
- Wordpress hosting with auto-scaling - Free Trial Offer • AdFully Managed hosting for WordPress and WooCommerce businesses that need reliable, auto-scalable performance. Cloudways SafeUpdates now available.
- Self-hosting binary instrumentation framework for security research☆12Apr 10, 2023Updated 3 years ago
- Threat Box Assessment Tool☆19Mar 5, 2026Updated 7 months ago
- Are you able to use open source intelligence to solve this challenge?☆11Apr 14, 2019Updated 7 years ago
- ☆12Jul 15, 2022Updated 4 years ago
- Detect userland hooks placed by AV/EDR☆28Sep 4, 2023Updated 3 years ago
- Shellcode Loader Implementing Indirect Dynamic Syscall , API Hashing, Fileless Shellcode retrieving using Winsock2☆13Jul 15, 2023Updated 3 years ago
- ☆14Apr 24, 2026Updated 5 months ago
- Obfuscate payloads using IPv4, IPv6, MAC or UUID strings☆25Feb 17, 2024Updated 2 years ago
- ☆18May 22, 2024Updated 2 years ago
- Wordpress hosting with auto-scaling - Free Trial Offer • AdFully Managed hosting for WordPress and WooCommerce businesses that need reliable, auto-scalable performance. Cloudways SafeUpdates now available.
- ☆14Aug 3, 2026Updated 2 months ago
- Cyber Threat Intelligence Capability Maturity Model (CTI-CMM), a dedicated maturity framework to empower your team. Inspired by industry …☆50Jun 3, 2026Updated 4 months ago
- Better version of SharpPick☆14Aug 29, 2025Updated last year
- powershell script i wrote that can suspend an arbitrary process (with limits)☆22Mar 26, 2023Updated 3 years ago
- Restoring some of my older tools to the web☆14Oct 18, 2024Updated last year
- This script provides a Python library with methods to authenticate to various sources of threat intelligence and query IPs for the latest…☆18Feb 16, 2025Updated last year
- DLL manual mapping through hooking IAT functions.☆13Nov 2, 2024Updated last year
- ☆38Apr 1, 2024Updated 2 years ago
- Live index of all X.509 Certificates in Step CA queryable via GUI and API, easy human onboarding with in-browser CSR generation.☆27May 13, 2026Updated 4 months ago
- 1-Click AI Models by DigitalOcean Gradient • AdDeploy popular AI models on DigitalOcean Gradient GPU virtual machines with just a single click. Zero configuration with optimized deployments.
- Framework for interaction with external Win32 processes☆12Mar 9, 2026Updated 7 months ago
- ☆16Mar 22, 2023Updated 3 years ago
- Invoke-SPSI - Simple PowerShell Shellcode Injector☆38Oct 9, 2025Updated last year
- Okta Data Collector for BloodHound Community☆17Sep 23, 2026Updated 2 weeks ago
- KSE Shim Registration for abusing patching of IAT, driver callbacks, and IRP I/O packets.☆17Dec 12, 2025Updated 9 months ago
- ☆17Feb 15, 2022Updated 4 years ago
- PowerShell toolkit for AMSI/Defender detection-boundary analysis and static malware triage maps byte offsets to detection triggers, plus …☆86Jul 28, 2026Updated 2 months ago
- Accelerating the collection, processing, analysis and outputting of digital forensic artefacts.☆32Nov 23, 2025Updated 10 months ago
- ☆39Aug 6, 2025Updated last year
- Deploy open-source AI quickly and easily - Special Bonus Offer • AdRunpod Hub is built for open source. One-click deployment and autoscaling endpoints without provisioning your own infrastructure.
- Vibe Malware Triage - MCP server for static PE analysis.☆78Sep 11, 2026Updated 3 weeks ago
- CVE-2026-49881, using insecure context creation in Android 17's Telecom service to execute arbitrary code as UID 1000 system_server from …☆104Sep 9, 2026Updated last month
- ☆16Jan 15, 2026Updated 8 months ago
- Notes from my "Implementing a Kick-Butt Training Program: Blue Team GO!" talk☆14Mar 4, 2019Updated 7 years ago
- Single header code that sets any section's page to No Access☆11Feb 15, 2022Updated 4 years ago
- Direct, source-level WebAssembly debugger☆54Mar 15, 2021Updated 5 years ago
- Short Python script for parsing Defender VDM signature files.☆10Sep 22, 2024Updated 2 years ago