Linux #rootkit and #malware revealer
☆31Aug 1, 2024Updated 2 years ago
Alternatives and similar repositories for sunlight
Users that are interested in sunlight are comparing it to the libraries listed below. We may earn a commission when you buy through links labeled 'Ad' on this page.
Sorting:
- Decloak Linux stealth rootkits hiding data with this simple memory mapped IO investigation tool.☆29Sep 29, 2025Updated last year
- Linux BPF plugins for Volatility3☆23Jan 19, 2024Updated 2 years ago
- Simple root privilege escalation detection using eBPF 🐝☆34Jul 16, 2026Updated 2 months ago
- Tools and scripts to deploy and manage OpenRelik instances☆17Mar 23, 2026Updated 6 months ago
- FJTA (Forensic Journal Timeline Analyzer) is a tool that analyzes Linux filesystem (ext4, XFS) journals (not systemd-journald logs), gene…☆112Apr 8, 2026Updated 6 months ago
- Virtual machines for every use case on DigitalOcean • AdGet dependable uptime with 99.99% SLA, simple security tools, and predictable monthly pricing with DigitalOcean's virtual machines, called Droplets.
- sudo-parser is a tool to audit complex sudoers files☆18Nov 2, 2022Updated 3 years ago
- Simple CLI utility to save off an image from every webcam hooked into a mac☆14May 20, 2021Updated 5 years ago
- Rootkit breaker - experimental Linux anti-rootkit tool based on kprobes☆12Sep 30, 2020Updated 6 years ago
- Unprivileged endpoint deception for macOS and Linux workstations. Uses FIFO baits, other local traps, and protected sessions to detect se…☆25Jul 12, 2026Updated 2 months ago
- ☆34Apr 29, 2021Updated 5 years ago
- Some security by obscurity using port-jumping.☆14Jul 3, 2026Updated 3 months ago
- Better version of SharpPick☆14Aug 29, 2025Updated last year
- Indicators of compromise from to analysis and research by Nextron Threat Research team☆19Updated this week
- ESF modular ingestion tool for development and research.☆38Dec 21, 2021Updated 4 years ago
- Deploy open-source AI quickly and easily - Special Bonus Offer • AdRunpod Hub is built for open source. One-click deployment and autoscaling endpoints without provisioning your own infrastructure.
- Proof-of-Concept to evade auditd by tampering via ptrace☆19Aug 3, 2023Updated 3 years ago
- Production-ready detection & response queries for osquery☆646Jun 26, 2026Updated 3 months ago
- eBPF Memory Dump Tool☆119May 7, 2026Updated 5 months ago
- Modified-Thycotic-Secret-Stealer for use with DPAPI and offline Decryption☆19Aug 5, 2022Updated 4 years ago
- Base class for Jupyter Data Integrations☆11Feb 11, 2026Updated 7 months ago
- ☆53Oct 27, 2023Updated 2 years ago
- Volatile Artifact Collector collects a snapshot of volatile data from a system. It tells you what is happening on a system, and is of par…☆254Nov 18, 2024Updated last year
- Fast lookup server for NSRL and other hash database used in digital forensic☆52Jan 26, 2026Updated 8 months ago
- Wrapper for TSK (Sleuth Kit) Bindings☆11Jan 10, 2023Updated 3 years ago
- AI Agents on DigitalOcean Gradient AI Platform • AdBuild production-ready AI agents using customizable tools or access multiple LLMs through a single endpoint. Create custom knowledge bases or connect external data.
- A fast, deterministic, non-cryptographic hash for use in hash tables for Rust☆15Jan 12, 2021Updated 5 years ago
- Harvest Linux forensic data for operational triage of an event.☆50Aug 3, 2026Updated 2 months ago
- ☆23Jan 15, 2019Updated 7 years ago
- ☆29Jun 23, 2026Updated 3 months ago
- ☆28Sep 4, 2024Updated 2 years ago
- Framework for generating audit commands for Unix security audits☆66Aug 1, 2023Updated 3 years ago
- Bro script module for detecting malware using domain generation algorithms.☆13Feb 22, 2018Updated 8 years ago
- Establishes persistence on a Linux system by creating a udev rule that triggers the execution of a specified payload (binary or script)☆153Aug 26, 2024Updated 2 years ago
- Placeholder for my detection repo and misc detection engineering content☆44Oct 20, 2023Updated 2 years ago
- Deploy on Railway without the complexity - Free Credits Offer • AdConnect your repo and Railway handles the rest with instant previews. Quickly provision container image services, databases, and storage volumes.
- Forensic Artifact Collection Tool Matrix☆97Nov 9, 2024Updated last year
- The book and code repo for the FREE Fundamental C++ book by Kevin Thomas.☆21Nov 26, 2025Updated 10 months ago
- This is the Git repository for the Modern Red Teaming workshop given at SINCON2024.☆13May 23, 2024Updated 2 years ago
- UAC is a powerful and extensible incident response tool designed for forensic investigators, security analysts, and IT professionals. It …☆1,481Sep 9, 2026Updated last month
- A pure PowerShell/ .NET DFIR capability that dumps the Windows SRUM (System Resource Usage Monitor) database to CSVs for analysis.☆14Oct 21, 2021Updated 4 years ago
- A proof-of-concept re-assembler for reverse VNC traffic.☆24May 21, 2023Updated 3 years ago
- Read ETW Provider events. Inspired by ETWExplorer by Pavel Yosifovich☆21Jun 29, 2024Updated 2 years ago