BeaconHunter

BeaconHunter Herramienta de monitoreo y caza basada en comportamiento construida en C que aprovecha el rastreo ETW. Los equipos azules pueden usar esta herramienta para detectar y responder a posibles beacons de Cobalt Strike. Los equipos rojos pueden usar esta herramienta para investigar omision...

RX-INT: a Kernel Engine for Real-Time Detection and Analysis of In-Memory Threats

Malware and cheat developers use fileless execution techniques to evade traditional, signature-based security products. These methods include various types of manual mapping, module stomping, and threadless injection which work entirely within the address space of a legitimate process, presenting...