Xacone/BestEdrOfTheMarket

Open EDR public repository

Remove AV/EDR Kernel ObRegisterCallbacks、CmRegisterCallback、MiniFilter Callback、PsSetCreateProcessNotifyRoutine Callback、PsSetCreateThreadNotifyRoutine Callback、PsSetLoadImageNotifyRoutine Callback...

Public malware techniques used in the wild: Virtual Machine, Emulation, Debuggers, Sandbox detection.

A tool uses Windows Filtering Platform (WFP) to block Endpoint Detection and Response (EDR) agents from reporting security events to the server.

APT-Hunter is Threat Hunting tool for windows event logs which made by purple team mindset to provide detect APT movements hidden in the sea of windows event logs to decrease the time to uncover suspicious activity

This map lists the essential techniques to bypass anti-virus and EDR

This project aims to compare and evaluate the telemetry of various EDR products.

Wazuh - The Open Source Security Platform. Unified XDR and SIEM protection for endpoints and cloud workloads.

Pafish is a testing tool that uses different techniques to detect virtual machines and malware analysis environments in the same way that malware families do