#edr (19 Repositories)
Ranked open-source repositories tagged with #edr, scored by pull request acceptance likelihood and maintainer engagement velocity.
5.8%
4.4h
19 repositories tagged #edr
antropos17/Aegis
Local-first desktop monitoring for AI agents. Inspect processes, files, network activity and evidence; review selected actions through opt-in policy and MCP tools. Windows-first; macOS/Linux experimental.
Karib0u/rustinel
Endpoint detection for Windows, Linux, and macOS. Sigma, YARA, and IOC rules on native telemetry. Written in Rust. No cloud account required.
SitinCloud/Owlyshield
Owlyshield is an EDR framework designed to safeguard vulnerable applications from potential exploitation (C&C, exfiltration and impact).
theSecHunter/Hades-Windows
Hades HIDS/HIPS for Windows
zero2504/EDR-GhostLocker
AppLocker-Based EDR Neutralization
ion-storm/sysmon-edr
Sysmon EDR POC Build within Powershell to prove ability.
xuanxuan0/TiEtwAgent
PoC memory injection detection agent based on ETW, for offensive and defensive research purposes
AabyssZG/HashDump-BypassEDR
Windows绕过EDR实现DumpHash
zeroperil/HookDump
Security product hook detection
starkdmi/BrightXDR
Free and Open Source alternative to Vivid macOS application to extend Apple XDR display brightness from 500 up to 1600 nits.
HydraDragonAntivirus/HydraDragonAntivirus
Dynamic and static analysis with Real Time Malware Analysis with Antivirus for Windows, including open-source XDR (3 EDR projects), ClamAV, YARA-X, machine learning AI, behavioral analysis, Unpacker, Deobfuscator, Decompiler, website signatures, Ghidra, Suricata, Sigma, Kernel, Hypervisior based protection and much more than you can imagine.
kiding/wanna-see-a-whiter-white
CSS trick/bug to display a brighter white by exploiting browsers' HDR capability and Apple's EDR system
xuanxuan0/DripLoader
Evasive shellcode loader for bypassing event-based injection detection (PoC)
wecooperate/iMonitor
iMonitor（冰镜 - 终端行为分析系统）
jthuraisamy/TelemetrySourcerer
Enumerate and disable common sources of telemetry used by AV/EDR.
0xrawsec/whids
Open Source EDR for Windows
Xacone/BestEdrOfTheMarket
EDR Lab for Experimentation Purposes
ION28/BLUESPAWN
An Active Defense and EDR software to empower Blue Teams
bytedance/Elkeid
Elkeid is an open source solution that can meet the security requirements of various workloads such as hosts, containers and K8s, and serverless. It is derived from ByteDance's internal best practices.