Popular repositories Loading

1. splunk-detection-lab splunk-detection-lab Public

   A defensive Splunk lab built to ingest Windows telemetry, normalize Sysmon events, and validate practical SPL detection use cases.

   PowerShell 1

2. windows-detection-lab-wazuh-sysmon windows-detection-lab-wazuh-sysmon Public

   collect endpoint telemetry, validate ingestion pipelines, and implement custom detections for common Windows attack patterns.

   PowerShell

3. PhantomTPM PhantomTPM Public

   kernel-mode TPM interception driver

   C

4. KernelMinHook KernelMinHook Public

   Small kernel-mode hooking library in C inspired by MinHook, with trampolines, instruction relocation, code cave reuse and MDL-backed patching.

   C

5. rssi-dashboard-demo rssi-dashboard-demo Public

   HTML