Elkeid is an open source solution that can meet the security requirements of various workloads such as hosts, containers and K8s, and serverless. It is derived from ByteDance's internal best practices.

Adversary tradecraft detection, protection, and hunting

Open Source EDR for Windows

Adversary emulation for EDR/SIEM testing (macOS/Linux)

A tool to run and validate telemetry for Atomic Red Team tests

Whenever PowerShell is launched, Notepad will also open. You can customize the script for educational purposes, but I emphasize that I do not take any responsibility for its use or any actions taken.

Remotely predicts identifies the presence of EDR/XDR solutions on networks