endpoint-detection

Here are 20 public repositories matching this topic...

Karib0u / rustinel

Open-source cross-platform endpoint detection engine for Windows, macOS, and Linux using ETW, ESF, eBPF, Sigma, YARA, IOCs, and ECS NDJSON alerts.

Updated Aug 24, 2026
Rust

bbc / bbc-speech-segmenter

Star

A complete speech segmentation system using Kaldi and x-vectors for voice activity detection (VAD) and speaker diarisation.

automatic-speech-recognition speech-to-text voice-activity-detection speech-detection x-vectors endpoint-detection

Updated Jun 17, 2024
Shell

Step-by-step guide to deploying a Wazuh SIEM/SOC home lab using the official OVA covers hypervisor networking, memory optimization for low-RAM systems, dashboard access, SSL troubleshooting, and Windows endpoint agent deployment with full screenshots.

vmware siem soc cyber-security wazuh home-lab endpoint-detection

Updated Jul 13, 2026

Krishita17 / KeyWraith

Star

Adaptive BadUSB/HID attack emulation + behavioral endpoint detection with the Flipper Zero. Defensive-security research: build a labeled human-vs-injected keystroke dataset, train an EDR-style detector, and red-team it with an adaptive humanized attacker.

Updated Aug 19, 2026
Python

2Tricky4u / Automated-Analysis-and-Mutation-of-Software-Artifacts-against-AV-EDR

Star

Experimental closed-loop EDR evaluation framework, automated artifact mutation, sandboxed execution, telemetry collection, and explainable triage. Understands why detections trigger. M.Sc. Cybersecurity thesis (EPFL, 2026).

testing windows rust security research thesis mutation-testing detection llvm grpc mutation etw endpoint security-research edr explainability endpoint-detection

Updated Mar 18, 2026
Rust

ticfinack / edr-graph

Star

Graph-powered EDR agent with LLM threat analysis, real-time IOC matching, and chain-aware response actions

python cybersecurity graph-database threat-intelligence edr fastapi endpoint-detection llm kuzu

Updated Aug 20, 2026
Python

lasersharkkiller / NortonAntivirusNextGenEDR

Star

On a scale of one to America, this NextGen Norton Antivirus EDR just made enterprise-grade defense free. Built by a Norton, carrying forward a name rooted in cybersecurity history, reimagined for modern threats.

antivirus edr endpoint-detection-response endpoint-detection antivirus-scanner endpoint-detection-and-response antivirus-protection-for-windows antivirus-tools

Updated Jul 2, 2026
PowerShell

dylanpatriarchi / argus

Star

Argus. A minimal, educational EDR / endpoint monitor written in Nim. It collects process, file, and network telemetry, normalizes it, and runs a rule-based detection engine with MITRE ATT&CK mapping. Read-only and defensive by design.

security nim educational siem nim-lang learning-project blue-team edr mitre-attack defensive-security threat-detection security-monitoring endpoint-security detection-engineering endpoint-detection

Updated Aug 1, 2026
Nim

ng-sudo / suspicious-process-monitor

Star

"Python-based security tool for detecting suspicious processes"

python3 cybersecurity threat-hunting soc blue-team threat-detection python-automation endpoint-detection suspicious-activity-detection

Updated Dec 18, 2025
Python

MarkRWatts / Argus

Star

Real-time macOS living-off-the-land (LOLBin) activity radar, built on the Sigma detection rule format.

macos swift security siem sigma mitre-attack swiftui threat-detection detection-engineering endpoint-detection

Updated Aug 23, 2026
Swift

pq-cybarg / digger

Star

Cross-platform vibe-coded (probably badly made but w.e) endpoint forensics suite. Dual SHA-256+SHA3-256 hash-chained. ML-DSA-65-signed evidence.

cross-platform forensics compliance post-quantum-cryptography yara opsec threat-intelligence threat-detection browser-forensics chain-of-custody endpoint-detection local-llm firewall-audit

Updated Jun 15, 2026
Python

SoheilaAnsari / Speech_endpoint_detection

Star

I implemented a speech endpoint detector that figures out where words start and stop, using short-term energy and zero-crossing rate. Works on Persian and English.

signal-processing matlab persian speech-processing speech-recoginition endpoint-detection

Updated May 22, 2026
MATLAB

gnaixnaij / guardian

Star

Free lightweight EDR for small teams. Monitor processes, files, and network. Detect threats with YAML rules. Web dashboard included.

python security incident-response edr endpoint-detection

Updated Jul 1, 2026
Python

fa1829 / windows-ir-lab

Star

Windows endpoint detection engine (detection-as-code) with MITRE ATT&CK-mapped rules, validated on 5,650 real host events with zero false positives.

python windows security powershell incident-response sysmon mitre-attack detection-engineering endpoint-detection

Updated Jul 9, 2026
Python

rohithbaggu56-dot / Sysmon-attack-investigation-lab

Star

Built a Sysmon-based endpoint investigation lab to analyze attacker activity from initial execution through forensic evidence collection using Sysmon event logs, MITRE ATT&CK mapping, and IOC validation.

windows log-analysis incident-response cybersecurity sysmon threat-hunting digital-forensics soc blue-team mitre-attack endpoint-detection

Updated Apr 6, 2026

forgehk / darkforge-edr

Star

Lightweight endpoint detection agent in Go. Process telemetry, YAML rule engine with name/cmdline/regex matching, JSON-lines alerts.

go security soc blue-team edr mitre-attack endpoint-detection

Updated May 17, 2026
Go

roddykambayi123-jpg / bluepy-etdt

Star

Endpoint triage system for detecting suspicious activity using Python, MITRE ATT&CK mapping, and HTML threat reports.

python incident-response dfir cybersecurity soc mitre-attack threat-triage endpoint-detection

Updated Oct 7, 2025
Python

jaydenwilliams-cyber / Sysmon-Detection-Lab

Star

Deployed Sysmon on Windows 10 with a custom XML ruleset to detect process creation, LOTL techniques, and encoded PowerShell execution via MITRE ATT&CK T1059.

windows powershell cybersecurity sysmon blue-team mitre-attack threat-detection living-off-the-land endpoint-detection

Updated Apr 2, 2026

BHCyber / Fidelis-EDR-Scripts

Star

Collection of scripts for Fidelis CyberSecurity EDR

incident-response forensics threat-hunting endpoint forensic-analysis edr forensics-investigations endpoint-security endpoint-detection-response endpoint-detection

Updated Sep 24, 2022
VBScript

xonoxitron / ebpf-sentinel

Star

Linux kernel security: Rust eBPF probes, scalable telemetry (NDJSON/gRPC), MITRE ATT&CK detection-as-code, and Claude-powered SOAR triage tuned for ML workloads.

grpc aya siem ebpf ndjson tracepoints soar edr file-integrity-monitoring detection-engineering endpoint-detection linux-kernel-security reverse-shell-detection telemetry-pipeline process-lineage ml-infrastructure-security

Updated Jun 11, 2026
Rust

Improve this page

Add a description, image, and links to the endpoint-detection topic page so that developers can more easily learn about it.

Curate this topic

Add this topic to your repo

To associate your repository with the endpoint-detection topic, visit your repo's landing page and select "manage topics."

Learn more

Navigation Menu

endpoint-detection

Here are 20 public repositories matching this topic...

Karib0u / rustinel

bbc / bbc-speech-segmenter

UsmanPrime / Wazuh-Setup

Krishita17 / KeyWraith

2Tricky4u / Automated-Analysis-and-Mutation-of-Software-Artifacts-against-AV-EDR

ticfinack / edr-graph

lasersharkkiller / NortonAntivirusNextGenEDR

dylanpatriarchi / argus

ng-sudo / suspicious-process-monitor

MarkRWatts / Argus

pq-cybarg / digger

SoheilaAnsari / Speech_endpoint_detection

gnaixnaij / guardian

fa1829 / windows-ir-lab

rohithbaggu56-dot / Sysmon-attack-investigation-lab

forgehk / darkforge-edr

roddykambayi123-jpg / bluepy-etdt

jaydenwilliams-cyber / Sysmon-Detection-Lab

BHCyber / Fidelis-EDR-Scripts

xonoxitron / ebpf-sentinel

Improve this page

Add this topic to your repo