Linux #rootkit and #malware revealer
☆31Aug 1, 2024Updated 2 years ago
Alternatives and similar repositories for sunlight
Users that are interested in sunlight are comparing it to the libraries listed below. We may earn a commission when you buy through links labeled 'Ad' on this page.
Sorting:
- Decloak Linux stealth rootkits hiding data with this simple memory mapped IO investigation tool.☆29Sep 29, 2025Updated last year
- Linux BPF plugins for Volatility3☆23Jan 19, 2024Updated 2 years ago
- A tool to parse Windows Master File Table ($MFT) and import them into Elasticsearch.☆12Updated this week
- FJTA (Forensic Journal Timeline Analyzer) is a tool that analyzes Linux filesystem (ext4, XFS) journals (not systemd-journald logs), gene…☆114Apr 8, 2026Updated 6 months ago
- Remotely collect linux live forensics artifacts.☆14Jul 8, 2022Updated 4 years ago
- Managed Database hosting by DigitalOcean • AdPostgreSQL, MySQL, MongoDB, Kafka, Valkey, and OpenSearch available. Automatically scale up storage and focus on building your apps.
- Simple CLI utility to save off an image from every webcam hooked into a mac☆14May 20, 2021Updated 5 years ago
- Tools and scripts to deploy and manage OpenRelik instances☆17Mar 23, 2026Updated 7 months ago
- Rapid Large-Scale Hunting and Collection for Enterprise AD Networks☆10May 7, 2025Updated last year
- Generate Volatility3 profiles from BTF.☆38Dec 21, 2024Updated last year
- ☆11Sep 26, 2026Updated last month
- Some security by obscurity using port-jumping.☆14Jul 3, 2026Updated 3 months ago
- Volatile Artifact Collector collects a snapshot of volatile data from a system. It tells you what is happening on a system, and is of par…☆254Nov 18, 2024Updated last year
- Production-ready detection & response queries for osquery☆650Jun 26, 2026Updated 4 months ago
- yet another hidden LKM hunter☆32Sep 18, 2025Updated last year
- Deploy to Railway using AI coding agents - Free Credits Offer • AdUse Claude Code, Codex, OpenCode, and more. Autonomous software development now has the infrastructure to match with Railway.
- A ruleset to find potentially malicious code in macOS malware samples☆40Aug 29, 2023Updated 3 years ago
- ESF modular ingestion tool for development and research.☆38Dec 21, 2021Updated 4 years ago
- Rust Linux Kernel Module designed for LKM rootkit detection☆64Mar 12, 2025Updated last year
- Unprivileged endpoint deception for macOS and Linux workstations. Uses FIFO baits, other local traps, and protected sessions to detect se…☆26Jul 12, 2026Updated 3 months ago
- Wrapper for TSK (Sleuth Kit) Bindings☆11Jan 10, 2023Updated 3 years ago
- ☆25Oct 9, 2024Updated 2 years ago
- Better version of SharpPick☆13Aug 29, 2025Updated last year
- eBPF Memory Dump Tool☆122Oct 20, 2026Updated last week
- Base class for Jupyter Data Integrations☆11Feb 11, 2026Updated 8 months ago
- GPU virtual machines on DigitalOcean Gradient AI • AdGet to production fast with high-performance AMD and NVIDIA GPUs you can spin up in seconds. The definition of operational simplicity.
- A fast, deterministic, non-cryptographic hash for use in hash tables for Rust☆15Jan 12, 2021Updated 5 years ago
- Cheat sheet to detect and remove linux kernel rootkit☆82Dec 16, 2024Updated last year
- Harvest Linux forensic data for operational triage of an event.☆50Aug 3, 2026Updated 2 months ago
- Got a bogus CVE someone got for a non-vuln? Please share here!☆26Jul 24, 2024Updated 2 years ago
- Analyst tool for creating pivot maps of data sources☆16Sep 11, 2017Updated 9 years ago
- Awesome Splunk SPL hunt queries that can be used to detect the latest vulnerability exploitation attempts & subsequent compromise☆69Jul 2, 2026Updated 3 months ago
- dump of artwork, logos, and other images related to the hacker's choice <thc.org> @hackerschoice, a security research group founded in 19…☆14Jun 15, 2026Updated 4 months ago
- A simple rpc2socks alternative in pure Go.☆31Jul 8, 2024Updated 2 years ago
- ☆28Sep 4, 2024Updated 2 years ago
- Managed Kubernetes at scale on DigitalOcean • AdDigitalOcean Kubernetes includes the control plane, bandwidth allowance, container registry, automatic updates, and more for free.
- Fast lookup server for NSRL and other hash database used in digital forensic☆53Jan 26, 2026Updated 9 months ago
- The book and code repo for the FREE Fundamental C++ book by Kevin Thomas.☆21Nov 26, 2025Updated 11 months ago
- ☆30Jun 23, 2026Updated 4 months ago
- Placeholder for my detection repo and misc detection engineering content☆44Oct 20, 2023Updated 3 years ago
- Packet Monkey is a tool to filter and classify PCAPs using Wireshark filters☆15Sep 19, 2026Updated last month
- Workshop: Forensic Analysis of eBPF based Linux Rootkits☆15Jul 9, 2026Updated 3 months ago
- ☆23Jan 15, 2019Updated 7 years ago