palaniyappanBala

Pinned Repositories

accessch
Automatically exported from code.google.com/p/accessch
Language:C++0 0 10
corkami
Automatically exported from code.google.com/p/corkami
Language:Assembly1 1 70
Cuckoo-1
Additional report formatting for Cuckoo Honeypot
Language:Python1 2 02
thug-1
A dockerized Thug https://github.com/buffer/thug instance
Language:Python1 1 00

palaniyappanBala's Repositories

palaniyappanBala/AIL-framework
Analysis Information Leak framework. Project moved to https://github.com/ail-project
palaniyappanBala/aktaion2
Aktaion is a machine learning open source & active defense (orchestration) prototype. The tool focuses on the detection of exploits based on machine learning techniques, independent of static-based signatures.
Language:Python0 0
palaniyappanBala/App-Locker
Blocks execution of certain applications.
Language:C++0 0
palaniyappanBala/APT_CyberCriminal_Campagin_Collections
APT & CyberCriminal Campaign Collection
Language:YARA0 0
palaniyappanBala/BLUESPAWN
An Active Defense and EDR software to empower Blue Teams
Language:C++0 0
palaniyappanBala/cyphon
Open source incident management and response platform.
Language:Python0 0
palaniyappanBala/dfirt
Collect information of Windows PC when doing incident response
palaniyappanBala/ETW2JSON
Tool and library to convert ETW logs to JSON files
Language:C#0 0
palaniyappanBala/EtwStream
Logs are event streams. EtwStream provides In-Process and Out-of-Process ObservableEventListener. Everything can compose and output to anywhere by Reactive Extensions.
Language:C#0 0
palaniyappanBala/fips2zips
json used to find all the ZIP codes in a FIPS(Federal Information Processing Standards) code area
Language:Python1 0
palaniyappanBala/flan-vulnerabilityscanner
A pretty sweet vulnerability scanner
Language:Python0 0
palaniyappanBala/hidden-av-filterdrivers
🇺🇦 Windows driver with usermode interface which can hide processes, file-system and registry objects, protect processes and etc
palaniyappanBala/krabsetw
KrabsETW provides a modern C++ wrapper and a .NET wrapper around the low-level ETW trace consumption functions.
Language:C++0 0
palaniyappanBala/LightningScanner
A lightning-fast memory pattern scanner, capable of scanning gigabytes of data per second.
Language:C++0 0
palaniyappanBala/LiSa
Sandbox for automated Linux malware analysis.
Language:Python0 0
palaniyappanBala/lkrg
Linux Kernel Runtime Guard (LKRG). Linux Kernel Runtime Integrity Checking and Exploit Detection. Debian packaging fork only. Fork Homepage: https://www.whonix.org/wiki/Linux_Kernel_Runtime_Guard_LKRG Upstream original: https://www.openwall.com/lkrg/
Language:C0 0
palaniyappanBala/Microsoft.Diagnostics.Tracing.Logging
.NET library for logging data via EventSource/ETW
Language:C#0 0
palaniyappanBala/Owlyshield
Owlyshield is an EDR framework designed to safeguard vulnerable applications from potential exploitation (C&C, exfiltration and impact).
Language:Rust0 0
palaniyappanBala/psexec_noinstall
Repository contains psexec, which will help to exploit the forgotten pipe
Language:Python0 0
palaniyappanBala/pypsexec
Remote Windows execution like PsExec on Python
Language:Python0 0
palaniyappanBala/pywintrace
ETW Python Library
Language:Python0 0
palaniyappanBala/ransomware_detection
:arrows_counterclockwise: Ransomware recovery app for Nextcloud
Language:PHP0 0
palaniyappanBala/RmEye
戎码之眼是一个window上的基于att&ck模型的威胁监控工具.有效检测常见的未知威胁与已知威胁.防守方的利剑
Language:Python0 0
palaniyappanBala/Sealighter
Sysmon-Like research tool for ETW
Language:C++0 0
palaniyappanBala/sigar
System Information Gatherer And Reporter
Language:C0 0
palaniyappanBala/ved-ebpf
VED-eBPF: Kernel Exploit and Rootkit Detection using eBPF
Language:C++0 0
palaniyappanBala/wdd
dd for Windows
Language:C0 0
palaniyappanBala/whids
Open Source EDR for Windows
Language:Go0 0
palaniyappanBala/WinPmem
The multi-platform memory acquisition tool. ram dump tool
Language:C0 0
palaniyappanBala/yara-forge
Automated YARA Rule Standardization and Quality Assurance Tool
Language:Python0 0