Tools
fibratus
rabbitstack/fibratus
Fibratus is a Windows security sensor for real-time threat detection and response. It monitors system events, applies behavioral rules and YARA memory scanning, and exports telemetry for forensic analysis.
Topics
Related projects
BLUESPAWN1.4kBLUESPAWN is an open-source active defense and endpoint detection and response tool for Windows blue teams, with hunt, mitigate, and monitor modes to detect and remove malicious activity.
rustinel529Rustinel is an open-source endpoint detection agent for Windows, Linux and macOS. It runs Sigma, YARA and IOC rules over native telemetry and writes local alerts without requiring a cloud account.
x64dbg50.3kAn open-source user-mode debugger for Windows built for reverse engineering and malware analysis, offering disassembly, memory inspection, scripting and a rich plugin system for hands-on binary debugging.
sniffnet42.2kA cross-platform desktop app for comfortably monitoring network traffic, with real-time charts, connection inspection, geolocation, protocol identification, notifications and PCAP import/export.
chezmoi22.2kchezmoi is a command-line dotfile manager that keeps configuration files in sync across multiple machines, with templating, encryption and secret-manager support for secure, reproducible setups.
Atlas22.1kAtlas is an open-source Windows modification that applies privacy, performance and usability tweaks through AME Wizard playbooks, aiming for a lighter, faster system without breaking essential features.