HN · GitHub Signals

OPEN SOURCE, IN FOCUS

rustinel

karib0u/rustinel

Open-source endpoint detection engine for Windows and Linux using ETW, eBPF, Sigma, YARA, IOCs, and ECS NDJSON alerts.

Explore on GitHub ↗

Saved projects stay in this browser. No account needed.

TAKE A CLOSER LOOK

Start with the source.

The repository is the place to check installation steps, supported platforms, the license, and current maintenance before choosing a tool.

Read the documentation on GitHub ↗

Keep exploring

Find projects in the same areas, or search the archive for a different approach.

ANOTHER GOOD FIND

Explore related projects

View the archive ↗

Connected by topics and descriptions.

innerwarden

innerwarden

Autonomous open-source security agent for Linux (Apache-2.0). 40 eBPF hooks, 49 detectors, 47 correlation rules, 65 MITRE ATT&CK techniques, AI triage, behavioral DNA cross-IP tracking, mesh defense.

Take a look →
lotvulture

lotvulture

Real-time parking lot occupancy detection using existing security cameras and on-device computer vision.

Take a look →
perplexityai

bumblebee

Read-only tool for inventorying packages, extensions, and developer-tool metadata on macOS and Linux developer endpoints, built for fast supply-chain exposure checks.

Take a look →
perplexityai

numbat

Visibility into AI agent activity on endpoints, with on-device detection, optional pre-action blocking, and forensic reconstruction.

Take a look →