Digging Deeper....

Slips, a free software behavioral Python intrusion prevention system (IDS/IPS) that uses machine learning to detect malicious behaviors in the network traffic. Stratosphere Laboratory, AIC, FEL, CVUT in Prague.

List of real-world threats against endpoint protection software

Palo Alto Networks App for Splunk leverages the data visibility provided by Palo Alto Networks next-generation firewalls and endpoint security with Splunk's extensive investigation and visualization capabilities to deliver an advanced security reporting and analysis tool.

Collection of tool you need to have in your Endpoint Detection and Response arsenal

The Palo Alto Networks Add-on for Splunk allows a Splunk® Enterprise or Splunk Cloud administrator to collect data from Palo Alto Networks Next-Generation Firewall devices and Advanced Endpoint Protection.

This repository includes source codes for Nanny-I for Linux. We're pleased you to join our project.

This project contains a collection of admin and malicious binaries. It is intended to be used for antivirus and EDR acceptance (criteria) testing

LibICAP implementation of the RFC3507

Secure one file easy to understand and install zero-dependent cross-platform Endpoint Detection & Response security tool

FOSS endpoint security

Automated Windows 10/11 security hardening PowerShell script implementing defence-in-depth controls based on NIST, CIS, and Microsoft security baselines. Features include advanced firewall rules, ASR deployment, BitLocker enforcement, network protocol lockdown, exploit mitigation, and rollback-safe operations for enterprise or standalone deployment

Unofficial Docker image for Velociraptor, an endpoint visibility and collection tool.

Automated SentinelOne deployment script for macOS using Workspace ONE UEM and Munki.

Implementing the OAUTH2 authorization mechanism using a dummy authorization server. Protecting the open endpoints of the web application by adding basic access control features.

RISC Versatile Endpoint Protection