behavioral-detection

procSniper: A Real-Time Lightweight Ransomware Behavioral Prevention Framework Using Local Inference Random Forest Model and Behavioral Telemetry

Omega Walls — a deterministic runtime trust boundary for RAG and AI agents that models cumulative prompt-injection, secret-exfiltration, and tool-abuse pressure before untrusted content reaches context or tools.

Adaptive BadUSB/HID attack emulation + behavioral endpoint detection with the Flipper Zero. Defensive-security research: build a labeled human-vs-injected keystroke dataset, train an EDR-style detector, and red-team it with an adaptive humanized attacker.

Lightweight Linux EDR prototype using eBPF and SQLite to detect suspicious system behaviors through kernel event correlation.

Protect applications by managing untrusted content with a stateful runtime that enforces risk states and controls actions in RAG and agent systems.

User-space Linux prototype exploring behavioral filesystem monitoring, containment, and recovery semantics.

Hardware-gated ransomware protection: TPM-anchored access, device fingerprinting, kernel-level monitoring, and behavioral detection. Windows-ready

A passive, host-based ransomware behavioral-detection engine (RansomWatch) -- explainable sliding-window rules grounded in RansomWhere?/CryptoDrop research, no malware anywhere in the repo.

Behavioral ransomware detection: catches mass file-encryption by how it behaves and freezes the process before it finishes. Live dashboard, canary files, safe sandbox simulator.

Get HitmanPro — a security antivirus tool for Windows with free download. This scanner enhances your PC's defenses by detecting malware missed by your primary antivirus, putting suspicious files in quarantine. Safe free download for Windows.

Behavioral threat detection engine for Windows Sysmon logs — MITRE ATT&CK-mapped rules, correlated incident scoring, analyst triage CLI, and HTML reporting.

Detection engineering lab using Python, SQL, and YAML to identify malicious behavior through log analysis and detection-as-code workflows.

Child safety implementation guide for platform developers. Add behavioral detection, content moderation, and KOSA compliance to any platform with a single API. Covers grooming, coercive control, bullying, radicalization, fraud, and 15+ threats across text, voice, image, and video in 27 languages.