edr

An Active Defense and EDR software to empower Blue Teams

Enumerate and disable common sources of telemetry used by AV/EDR.

Open-source cross-platform endpoint detection engine for Windows, macOS, and Linux using ETW, ESF, eBPF, Sigma, YARA, IOCs, and ECS NDJSON alerts.

Agentic AI EDR for developer workstations and autonomous agent swarms. Build Swarm Detection & Response platforms with Clawdstrike.

Windows绕过EDR实现DumpHash

OS-level monitor for AI agents: observes processes, file access, and network activity on the local machine and attributes each event to an agent instance.

Tools to automate and/or expedite response.