BlackhawkLAB - cloud based end point detection and remediation solution

Powershell modules and commands that come in handy for pentests and red team assessments.

Parsing MITRE EDR Evaluation results

This project contains the python scripting which wraps the various ADL VIIRS EDR executables, for use in the CSPP VIIRS EDR package.

Lightweight Endpoint Detection & Response (EDR) Framework

Salt formula to deploy Lima Charlie products

Carbon Black - Cyphort Binary Detonation Connector

Cb Response integration with VirusTotal

VMRAY Connector

Carbon Black - Palo Alto Network WildFire binary detonation connector

Carbon Black Fidelis XPS Connector

connector for Juniper Network's Sky ATP api

Carbon Black detonation Integration with Bluecoat Malware Analysis (MAA)

Import Cb Collective Defense Cloud Intelligence Feeds to air-gapped VMware Carbon Black EDR servers

Python EDR system Example (server and client-side)

Enumerate and disable common sources of telemetry used by AV/EDR.

Connector for pulling iSIGHT IOCs into a Carbon Black feed

Security product hook detection

PoC memory injection detection agent based on ETW, for offensive and defensive research purposes