Repository Index

A repository of sysmon configuration modules

• sysmon
• dfir
• threat-hunting
• mitre-attack

Incident Response - Fast suspicious file finder

• dfir
• investigation
• incident-response
• threat-hunting

Advanced eBPF-driven Digital Forensics and Incident Response (DFIR) framework for live Golang malware analysis, threat hunting, and observability.

• bpf
• ebpf
• forensics
• goroutine