This repository contains a set of rules samples that can be directly used with Trellix Endpoint Security, in the Exploit Prevention policy.
☆35Nov 2, 2026Updated this week
Alternatives and similar repositories for ExpertRules
Users that are interested in ExpertRules are comparing it to the libraries listed below. We may earn a commission when you buy through links labeled 'Ad' on this page.
Sorting:
- A Windows-first malware analysis toolkit: Unicorn-powered PE emulator with 90+ Win32 API hooks, runtime IOC extraction, and one-shot repo…☆19Apr 28, 2026Updated 6 months ago
- Web based user interface for OpenRelik☆13Jun 21, 2026Updated 4 months ago
- ☆15Jul 30, 2026Updated 3 months ago
- Zac's assorted config files☆10Jan 11, 2017Updated 9 years ago
- This repository contains list of unwanted or suspicious file extensions in Windows environment.☆11Oct 6, 2022Updated 4 years ago
- GPUs on demand by Runpod - Special Offer Available • AdRun AI, ML, and HPC workloads on powerful cloud GPUs—without limits or wasted spend. Deploy GPUs in under a minute and pay by the second.
- Fork of ligolo-ng with exec and service capability☆16Oct 30, 2023Updated 3 years ago
- ☆19Oct 8, 2024Updated 2 years ago
- Block abused TLDs in Tenant Allow BlockList☆18Sep 10, 2026Updated last month
- Fortigate VPN-SSL Honeypot☆13Jun 28, 2026Updated 4 months ago
- FakeToaGo☆12Dec 28, 2023Updated 2 years ago
- INACTIVE - http://mzl.la/ghe-archive - Participation infrastructure playbooks☆14Jul 15, 2019Updated 7 years ago
- Trend Vision One Detection Models☆15Sep 7, 2026Updated last month
- Freeze is a payload toolkit for bypassing EDRs using suspended processes, direct syscalls, and alternative execution methods☆13Sep 30, 2022Updated 4 years ago
- SysFlow project APIs☆16Jun 5, 2024Updated 2 years ago
- Deploy to Railway using AI coding agents - Free Credits Offer • AdUse Claude Code, Codex, OpenCode, and more. Autonomous software development now has the infrastructure to match with Railway.
- Kernel Shellcode to add all privileges in token☆15Mar 13, 2017Updated 9 years ago
- ☆19Mar 28, 2019Updated 7 years ago
- Medusa combo files, Hashcat rules and dictionaries, JRT rules☆14Oct 20, 2022Updated 4 years ago
- ☆11Jun 12, 2023Updated 3 years ago
- pocket guide for core detection engineering concepts☆31May 8, 2023Updated 3 years ago
- A tool to do basic fingerprinting across a large number of hosts☆11Oct 20, 2020Updated 6 years ago
- LibreSSL with a backdoor in RSA key generation☆17Jun 26, 2016Updated 10 years ago
- PoC for CVE-2025-4660 demonstrating exploitation of the Forescout SecureConnector on Windows☆16Jul 16, 2025Updated last year
- EQGRP: Replicating DarkPulsar, an DLL capable of hooking Security Package Method Tables on the Heap!☆15Oct 11, 2020Updated 6 years ago
- Managed Database hosting by DigitalOcean • AdPostgreSQL, MySQL, MongoDB, Kafka, Valkey, and OpenSearch available. Automatically scale up storage and focus on building your apps.
- An IDA plugin to deobfuscate Pikabot's strings using RC4 and AES☆13Apr 8, 2024Updated 2 years ago
- Lightweight x86-64 instruction length disassembler (LDE)☆36Jun 17, 2023Updated 3 years ago
- Spotify C2 in golang☆11Dec 1, 2024Updated last year
- An Ansible role to deploy auditd and laurel☆15Apr 7, 2026Updated 6 months ago
- Official site for techcorridor.io☆13Apr 14, 2025Updated last year
- ☆16May 6, 2015Updated 11 years ago
- Helm charts for running open source digital forensic tools in Kubernetes☆216Sep 4, 2026Updated 2 months ago
- A web API for various cyber threat intelligence frameworks, including MITRE ATT&CK, CWE, ATLAS...☆23Oct 26, 2026Updated last week
- Living Off the Foreign Land setup scripts☆73Sep 6, 2026Updated last month
- Simple, predictable pricing with DigitalOcean hosting • AdAlways know what you'll pay with monthly caps and flat pricing. Enterprise-grade infrastructure trusted by 600k+ customers.
- The SOC Entity Triage workbook is designed to enhance the triage process for security operation centers (SOCs) by providing a comprehensi…☆10Mar 19, 2024Updated 2 years ago
- Collection of Jupyter Notebook for Threat Hunting and Blue Team Purposes☆22Jun 15, 2022Updated 4 years ago
- Go Shellcode Loader to be Integrated in Exploration C2☆27Feb 7, 2025Updated last year
- McAfee Threat Intelligence Exchange (TIE) client library for use with the OpenDXL Python Client☆15Mar 17, 2020Updated 6 years ago
- SysFlow collection probe☆18Jul 30, 2026Updated 3 months ago
- Convert MISP events to Elastalert rules☆12Aug 10, 2021Updated 5 years ago
- ☆10Nov 3, 2025Updated last year