packetzero Goto Github PK

abstractpb

C++ protobuffer abstraction layer

atomic-harness

A tool to run and validate telemetry for Atomic Red Team tests

atomic-red-team

Small and highly portable detection tests based on MITRE's ATT&CK.

atomic-validation-criteria

auditutils

bitcoinutils

Crystal-Lang implementation of Bitcoin SECP256k1 to generate public keys, sign and verify

bsmutils

clog

C++ Logging with per-module levels and string hiding for release-mode

code1920

conveyor

C++11 library : efficient event cache for osquery agent with multiple read cursor support

crow

C++11 lib for binary encoder/decoder. Like protobuf without needing .proto files

csvtoker

Simple C++ CSV line parser

diwebapp

dnsparser

Simple C++ DNS payload parser

dnsrmap

simple DNS reverse lookup map in C++

dnssniffer

Sniffer that extracts DNS data using libpcap in C++

dyno

Dynamic C++ objects for osquery

edarr-deps

etwrealtime

Example of real-time Windows ETW packet capture session

falco_builder_ubuntu

fring_bench

Comparison of JSON vs Binary record encoding performance tests with fring

fseventsp

Utility for extracting information from Apple .fseventsd files

go-atomicredteam

go-atomicredteam is a Golang application to execute tests as defined in the atomics folder of Red Canary's Atomic Red Team project (https://github.com/redcanaryco/atomic-red-team).

gorm-test

kafka.cr

crystal-lang wrapper around kafka C library

libcrow_cr

Compact encoding for typed tabular data. Think of it as a binary CSV file with protobuf-like encoding.

libetw

Simple C++ library for Windows ETW event access

libntstat

C++ library for com.apple.network.statistics kernel events on MacOS/OS X/Darwin

libtls_cert_example

C++ example of pinned certs and LibreSSL libtls

lurlparser

Lightweight URL & URI parser (RFC 1738, RFC 3986)