Popular repositories Loading

1. KernelMinHook KernelMinHook Public

   Small kernel-mode hooking library in C inspired by MinHook, with trampolines, instruction relocation, code cave reuse and MDL-backed patching.

   C 2

2. MonsteyAI-IDA-plugin MonsteyAI-IDA-plugin Public

   Local-first AI assistant for IDA Pro and Hex-Rays focused on game-modding reverse engineering, red ASM regions, XREF evidence, and trainer/modding triage.

   Python 2 1

3. splunk-detection-lab splunk-detection-lab Public

   A defensive Splunk lab built to ingest Windows telemetry, normalize Sysmon events, and validate practical SPL detection use cases.

   Python 1

4. windows-detection-lab-wazuh-sysmon windows-detection-lab-wazuh-sysmon Public

   collect endpoint telemetry, validate ingestion pipelines, and implement custom detections for common Windows attack patterns.

   PowerShell

5. PhantomTPM PhantomTPM Public

   kernel-mode TPM interception driver

   C

6. rssi-dashboard-demo rssi-dashboard-demo Public

   HTML