0x4d31
- Karma
- 0
- Created
- ()
- Submissions
- 0
-
a lightweight macOS detection agent that taps into Santa’s Endpoint Security telemetry, runs CEL detection rules locally on-device, and only ships high-signal alerts to a tiny backend. basically a poor man’s macOS EDR…
-
Finch is a lightweight reverse proxy that inspects TLS and HTTP traffic to extract JA3, JA4, JA4H and Akamai HTTP/2 fingerprints. It uses hot-reloadable HCL rules to evaluate requests and can allow, deny, route, or even…
- Show HN: Venator – Open-source threat detection (github.com)
a flexible threat detection platform that simplifies rule execution and management with k8s cronJobs and helm. flexible enough to run standalone or with other schedulers like hashicorp nomad.