Popular repositories Loading

1. ExtractedDefender ExtractedDefender Public

   Collection of extracted Microsoft Defender data for security research purposes

   238 33

2. gibson gibson Public

   Network monitoring tool that maps process-to-network connections, identifies cloud providers, and detects beaconing activity. Zero-flag agent binary for deployment, aggregation server, offline ASN …

   Rust 213 18

3. IndicatorOfCanary IndicatorOfCanary Public

   Canary Detection

   Python 200 17

4. defender_overview defender_overview Public

   Overview of MS Defender

   HTML 165 15

5. maps_scanner maps_scanner Public

   MAPS cloud scanner and response parser for Microsoft Defender research.

   Python 95 4

6. sleepwalker sleepwalker Public

   Passive backdoor implant that sniffs for a covert magic-packet trigger and runs tasks written in a custom 23-opcode bytecode command language.

   C 57 12