An EDR server designed to monitor, detect, and respond to threats on network endpoints.
-
Updated
Jul 22, 2024 - Python
An EDR server designed to monitor, detect, and respond to threats on network endpoints.
PyCanary: CMD line tool to monitor any directory for file access or file changes, log event, send basic alert to user, and dump and process information collected. There is also a background thread monitoring all created processes and logging them for later analysis.
BlackhawkLAB - cloud based end point detection and remediation solution
Uses the Damerau-Levenshtein distance to find suspicious tasks running on endpoints in Windows.
An EDR (Environmental Data Retrieval) Server written in Python.
A proof-of-concept Technology Add-On for Splunk that queries and indexes alerts from Generic EDR.
Carbon Black Response - IBM BigFix connector
[benchmark] Trajectory similarity computation
Welcome to Forge-XDR-Agent, an open-source Python project that represents my personal journey in developing an Extended Detection and Response (XDR) system.
A script to that checks for active connections to known malicious foreign IP addresses.
An example implementation of a "data interface" to provide real data to `edr_server`
Add a description, image, and links to the edr topic page so that developers can more easily learn about it.
To associate your repository with the edr topic, visit your repo's landing page and select "manage topics."