tsale/EDR-Telemetry

Open EDR public repository

EDR Lab for Experimentation Purposes

Detect Tactics, Techniques & Combat Threats

A repository of sysmon configuration modules

A tool uses Windows Filtering Platform (WFP) to block Endpoint Detection and Response (EDR) agents from reporting security events to the server.

Digging Deeper....

This map lists the essential techniques to bypass anti-virus and EDR

APT-Hunter is Threat Hunting tool for windows event logs which made by purple team mindset to provide detect APT movements hidden in the sea of windows event logs to decrease the time to uncover suspicious activity

Wazuh - The Open Source Security Platform. Unified XDR and SIEM protection for endpoints and cloud workloads.