A Synapse Rapid Power-Up that allows Synapse to interact with Assemblyline v4.

Process Hollowing (Malware Technique)

Analysis Plugin and Tools for Vivisect

Syntax highlighting for the storm query language

Synapse Central Intelligence System

Tools to assist in automatically searching network data feeds for threats being reported in threat feeds

Windows kernel and user mode emulation.

Crescendo is a swift based, real time event viewer for macOS. It utilizes Apple's Endpoint Security Framework.

DARPA Challenges Sets for Linux, Windows, and macOS

A Compiler Writing Journey

Create agents that monitor and act on your behalf. Your agents are standing by!

Visually explore, understand, and present your data.

ETW Python Library