NtWarden

NtWARden Инструментарий для анализа и исследования Windows Инструмент для инспекции системы Windows, построенный на ImGui + DirectX 11. Охватывает процессы, службы, сеть, внутреннее устройство ядра и многое другое — локально или по сети через WinSysServer. ⚠️ Часть этого проекта была написана с...

Detecting Concept Drift in Evolving Malware Families Using Rule-Based Classifier Representations

This work proposes a structural approach to concept drift detection in malware classification using decision tree rulesets. Classifiers are trained across temporal windows on the EMBER2024 dataset, and drift is quantified by comparing extracted rule representations using feature importance,...

Recorded Future Triage 安全漏洞

Recorded Future Triage is a cloud sandboxing service from US-based Recorded Future. A security vulnerability exists in Recorded Future Triage that stems from a Windows behavioral analysis engine that allows malicious samples to evade detection by recursively spawning a large number of child...