fibratus
Security sensor for realtime threat detection and protection
Fibratus is a free, open-source Windows security monitoring tool designed for real-time threat detection, endpoint protection, and forensic analysis. It observes operating system activity through Windows Event Tracing to identify potentially malicious behavior. Its behavior-driven rule engine detects suspicious processes, file operations, network activity, and other security-relevant events. YARA integration enables memory scanning for malware signatures and suspicious patterns. Users can...