elastic / endpoint-packageLinks
Repo for developing the endpoint package
☆26Updated last week
Alternatives and similar repositories for endpoint-package
Users that are interested in endpoint-package are comparing it to the libraries listed below
Sorting:
- Elastic Security Documentation☆86Updated this week
- EPR package specifications☆19Updated last week
- Elastic Agent - single, unified way to add monitoring for logs, metrics, and other types of data to a host.☆177Updated this week
- ☆36Updated 2 months ago
- Package storage for packages served through the package registry service☆10Updated 2 years ago
- Elastic Observability Documentation☆39Updated 3 weeks ago
- elastic-package - Command line tool for developing Elastic Integrations☆60Updated this week
- ☆36Updated 3 years ago
- Combining Sealighter with unpatched exploits to run the Threat-Intelligence ETW Provider☆175Updated 2 years ago
- Ideas for projects for defensive research or blue teaming☆10Updated 2 years ago
- Uses Threat-Intelligence ETW events to identify shellcode regions being hidden by fluctuating memory protections☆134Updated 2 years ago
- Threat Feeds, Threat lists, and regular lists of known IP ranges and domains. It updates every 4 hours.☆16Updated 4 years ago
- Public IoCs about log4j CVE-2021-44228☆9Updated 3 years ago
- ETW based POC to identify direct and indirect syscalls☆185Updated 2 years ago
- All necessary code in order to feed Sysmon data into Recurrent Neural Network☆17Updated 4 years ago
- 🚧 Currently transfering TLP:CLEAR rules from TLP:AMBER repository...☆21Updated last year
- Windows API Call Obfuscation☆104Updated 2 years ago
- ☆115Updated 2 years ago
- A Golang CLI for the MITRE ATT&CK Framework☆12Updated last month
- Quickly search for references to a GUID in DLLs, EXEs, and drivers☆74Updated 3 years ago
- Small tool to play with IOCs caused by Imageload events☆42Updated 2 years ago
- PoC for the Untrusted Pointer Dereference in the appid.sys driver☆16Updated last year
- A simple program to hook the current process to identify the manual syscall executions on windows☆258Updated 2 years ago
- Walks the CFG bitmap to find previously executable but currently hidden shellcode regions☆117Updated 2 years ago
- Youtube channel sample code☆49Updated this week
- ☆141Updated 2 years ago
- PoC capable of detecting manual syscalls from usermode.☆196Updated 6 months ago
- ☆70Updated 4 months ago
- Exploitation of echo_driver.sys☆170Updated last year
- ☆28Updated 3 years ago