defender

PowerShell-based Automation of Defender for Endpoint

「🛡️」AVs/EDRs Evasion tool

Repository for Software Certs for easy software blocking across corp environments, for example, using MDE IOC

Windows Exploit Protection Settings (Ultimate) GUI

Desktop KQL query builder for Microsoft security and Azure services - 52 tables across Defender, Sentinel, Entra ID, Azure Monitor, App Insights, and more

This is a Python script that demonstrates the techniques used by "stealer" malware to extract sensitive information from a Windows system.

Convert Microsoft Defender Antivirus Signatures (VDM) into a SQL DB

Cyber Equipment for Carrying out Pentesting and Server Defense from Hacker Attack Activities

BintaryPlant.com - ARP Defender

CLISID reference sheet for searching. A CLSID is a globally unique identifier that identifies a COM class object.

Defendo is a simple antivirus tool that scans files for malware using hash files. Built in Python, it offers basic protection and is easy to use.

An esay to use tool for gaining administrator privilege ( privilege escalation) on targeted system bypassing , disable defender and turn of AV.

Project Raven D3FEND Defender Edition — CDP-grounded, D3FEND OWL v1.0 canonical, defender-only. Engineering package for OpenAI Cybersecurity Grant submission.

🍯 An educational honeypot in ~2500 lines of Python. Simulates 12+ network services (SSH, HTTP, DNS, Modbus, Redis), captures credentials in real time, maps attacker behavior to MITRE ATT&CK, and visualizes everything on a live dashboard. 📡 Not production-grade — a transparent, MVP, hackable base for learning attack patterns.

Converting Malicious Joe Sandbox Results to MDE IOC Lists and TenantAllowBlockLists

A lightweight Fail2ban alternative that feels as simple as UFW

it is a package for defend from cyber attack

Monitor your javascript files and detect unauthorized changes.

KQL Collection

Advanced Python tool for detecting and logging keylogger activity in real-time. Educational project.