Silk Guardian
Silk Guardian is an anti-forensic Linux Kernel Module (LKM) kill-switch that monitors USB ports for changes, deletes files, and shuts down the computer. It was inspired by usbkill and serves as a fun project for learning. The tool is designed to prevent unauthorized access to the system and enhance security, especially in scenarios where physical access to the machine is a concern. To run Silk Guardian, compile the module using 'make', load it using 'sudo insmod silk.ko', and ensure the linux-headers package is installed. It is recommended to use (partial) disk encryption in conjunction with this tool for enhanced protection.
FEATURES
ALTERNATIVES
A library to access FileVault Drive Encryption (FVDE) encrypted volumes on Mac OS X systems.
Open source tool for generating YARA rules about installed software from a running OS.
A digital forensics tool that provides read-only access to file-system objects from various storage media types and file formats.
dc3dd is a patch to the GNU dd program, tailored for forensic acquisition with features like hashing and file verification.
A tool for parsing and extracting information from the Master File Table of NTFS file systems.
A collaborative forensic timeline analysis tool for organizing and analyzing data with rich annotations and comments.
Web interface for the Volatility Memory Analysis framework with advanced features.
PINNED
InfoSecHired
An AI-powered career platform that automates the creation of cybersecurity job application materials and provides company-specific insights for job seekers.
Fabric Platform by BlackStork
Fabric Platform is a cybersecurity reporting solution that automates and standardizes report generation, offering a private-cloud platform, open-source tools, and community-supported templates.
Mandos Brief Newsletter
Stay ahead in cybersecurity. Get the week's top cybersecurity news and insights in 8 minutes or less.
System Two Security
An AI-powered platform that automates threat hunting and analysis by processing cyber threat intelligence and generating customized hunt packages for SOC teams.
Aikido Security
Aikido is an all-in-one security platform that combines multiple security scanning and management functions for cloud-native applications and infrastructure.
Permiso
Permiso is an Identity Threat Detection and Response platform that provides comprehensive visibility and protection for identities across multiple cloud environments.
Wiz
Wiz Cloud Security Platform is a cloud-native security platform that enables security, dev, and devops to work together in a self-service model, detecting and preventing cloud security threats in real-time.
Adversa AI
Adversa AI is a cybersecurity company that provides solutions for securing and hardening machine learning, artificial intelligence, and large language models against adversarial attacks, privacy issues, and safety incidents across various industries.