Small and highly portable detection tests based on MITRE's ATT&CK.
Role in this project:
Security Engineer Contributions:6 reviews, 20 commits, 9 PRs in 6 months
Contributions summary:Alex contributed significantly to packet capture utilities within the repository, adding both MacOS and Linux based capabilities using BPF and raw sockets. Their work involved implementing BPF filters for UDP traffic and integrating these capture tools for testing. The user also integrated kernel module load and unload tests, as well as tests related to manipulating the login window process on MacOS.
mitremitre-attackportable
SQL powered operating system instrumentation, monitoring, and analytics.
Role in this project:
Back-end & Security Engineer Contributions:9 commits, 38 PRs, 196 comments in 1 year
Contributions summary:Alex contributed to the osquery project by addressing multiple aspects, including updating dependencies (AWS SDK), implementing a missing index for Windows processes, and fixing an issue that caused inefficiencies in table queries. Furthermore, the user added support for AWS session tokens, and also worked on memory management within the YARA module. The user also addressed security concerns by avoiding the scanning of special files in the Yara implementation, demonstrating a security-focused approach.
monitoringoperating-systemsqlsecurityintrusion-detection