45 matches found
kube-knark
Kube-Knark Project Trace your kubernetes runtime !! Kube-Knark is an open-source tracer that uses pcap & ebpf technology to perform runtime tracing on a deployed Kubernetes cluster. It is tracing the Kubernetes API execution and master node configuration files permission changes. The trace matchi...
fingerprint
fingerprint Monitoring Registry and File Changes in Windows - forensic analytics for windows registry and files "fingerprint" records the state of a windows system, in terms of files and registry. Such fingerprints can be compared to find all changed data. The data can be narrowed with procmon...
whatfiles
whatfiles Whatfiles는 다른 프로그램이 시스템에서 어떤 파일을 읽고/쓰고/생성하고/삭제하는지 기록하는 Linux 유틸리티입니다. 대상 프로세스에 의해 생성된 모든 새로운 프로세스와 스레드도 추적하며, 각 작업의 성공 여부를 기록합니다. 이유: main부터 종료까지 프로세스가 어떤 파일을 건드리는지 확인할 수 있는 간단한 유틸리티가 없다는 점에 오랫동안 답답함을 느껴왔습니다. 소프트웨어 벤더를 신뢰하지 않든, 멀웨어가 걱정되든, 프로그램이나 설치 프로그램이 시스템에 무엇을 하는지 아는 것은 중요합니다. lsof는 ...
FileWatchTower
FileWatchTower - FWT NOTE: This project is no longer maintained and has been published from archived projects for reference. It is available for anyone interested in developing file analysis software. FWT is a security analysis and file monitoring tool that utilizes Sysmon events. It tracks files...
fsmon
fsmon Linux、Android、iOS、macOS向けの低レベルファイルシステムモニタユーティリティ。 作者 : pancake @ nowsecure ライセンス : MIT 設計対象 システム管理者やインシデント対応者 セキュリティ研究者やフォレンジック分析者 I/O負荷の高いアプリケーションをデバッグする開発者 ファイルシステムアクセス動作の観察に興味のあるリバースエンジニア インストール macOS では、以下のコマンドでbrewを使ってインストールできます： brew tap nowsecure/fsmon...
Detection-CheatEngine
Detection-CheatEngine Principle Understanding ReadDirectoryChangesW Expansion You can add your detection vector easily in CEInfo.h pragma once define CEDETECTION1 L"ADDRESSES.FIRST" define CEDETECTION2 L"MEMORY.FIRST" Compile Visual Studio 2022 llvm-msvc link Some discussions on UnknownCheats...
CVE-2026-93290
Omni C20 uses hard-coded credentials that could allow an attacker to monitor log files to obtain credentials to access information like mapping data...
EUVD-2026-86411
Omni C20 uses hard-coded credentials that could allow an attacker to monitor log files to obtain credentials to access information like mapping data...
Malicious code in chainutils (PyPI)
--- -= Per source details. Do not edit below this line.=- Source: kam193 149995e4a1c4d289fa58be2adcab4095dca7c429097ad6735afef8270e7e4cb3 During import, package triggers malicious code. First, it ensures persistency e.g., through the autostart registry key. Then, based on the encrypted config, an...
How Malwarebytes stops the ransomware attack that most security software can’t see
Imagine this scenario: Your protection software is running perfectly. Systems are protected, definitions are up to date, behavioral analysis is active. Then, suddenly, files across your network start getting encrypted. Backups are being deleted. Ransom notes appear across your machines. Your...
ZOHO ManageEngine Applications Manager Information Disclosure Vulnerability (CNVD-2025-29926)
ZOHO ManageEngine Applications Manager is a set of IT operation and maintenance management solutions of the United States ZhuoHao ZOHO company. The product has application performance management, fault management, report generation and SLA management and other functions. An information disclosure...
ZOHO ManageEngine Applications Manager 安全漏洞
ZOHO ManageEngine Applications Manager is a set of IT operation and maintenance management solutions of the United States ZhuoHao ZOHO company. The product has application performance management, fault management, report generation and SLA management and other functions. An information disclosure...
EUVD-2007-0840
Malware in sbrugna...
EUVD-2024-52600
Malicious code in bioql PyPI...
EUVD-2022-32454
Malicious code in bioql PyPI...
EUVD-2022-40066
Malicious code in bioql PyPI...
[SECURITY] Fedora 41 Update: nodejs-nodemon-3.1.9-3.fc41
Simple monitor script for use during development of a node.js app. For use during development of a node.js based application. nodemon will watch the files in the directory in which nodemon was started, and if any files change, nodemon will automatically restart your node application. nodemon does...
[SECURITY] Fedora 40 Update: nodejs-nodemon-3.1.9-3.fc40
Simple monitor script for use during development of a node.js app. For use during development of a node.js based application. nodemon will watch the files in the directory in which nodemon was started, and if any files change, nodemon will automatically restart your node application. nodemon does...
BIT-NODE-MIN-2023-30582
A vulnerability has been identified in Node.js version 20, affecting users of the experimental permission model when the --allow-fs-read flag is used with a non- argument. This flaw arises from an inadequate permission model that fails to restrict file watching through the fs.watchFile API. As a...
