Nedim Šabić²

fibratus. Adversary tradecraft detection, protection, and hunting

rabbitc. Micro container runtime

cubostratus. Blazingly fast Linux syscall collector

awesome-ctf. A curated list of CTF frameworks, libraries, resources and softwares

awesome-pentest. A collection of awesome penetration testing resources, tools and other shiny things

awesome-security. A collection of awesome software, libraries, documents, books, resources and cools stuffs about security.

awesome-incident-response. A curated list of tools for incident response

netmutatus. Linux TCP/IP stack manipulation via Netlink / Netfilter

awesome-honeypots. an awesome list of honeypot resources

gobpf. Go bindings for creating BPF programs.

awesome-ebpf.

pe. A :zap: lightweight Go package to parse, analyze and extract metadata from Portable Executable (PE) binaries. Designed for malware analysis tasks and robust against PE malformations.

rabbitstack.github.io. RabbitStack blog

appscope. C

walk. Fast parallel version of golang filepath.Walk()

Custom-Fibratus-Rules. A few custom rules for the Fibratus tool (https://github.com/rabbitstack/fibratus)