Repositories list

• dependabot-configurator

  Public
  An easy tool to automatically optimize and maintain Dependabot configurations

  Python

  •

  BSD 3-Clause "New" or "Revised" License

  •0•4•0•2•Updated Dec 8, 2025Dec 8, 2025

• atomic-red-team

  Public
  Small and highly portable detection tests based on MITRE's ATT&CK.

  mitremitre-attack

  C

  •

  MIT License

  •3k•11k•17•9•Updated Dec 8, 2025Dec 8, 2025

• ebpfmon

  Public
  Go

  •

  BSD 3-Clause "New" or "Revised" License

  •4•89•0•1•Updated Dec 5, 2025Dec 5, 2025

• osquery-forensics-agent

  Public
  SecTor - Not-So-Secret Agents: Deploying AI to Optimize Security Operations

  Python

  •

  Other

  •1•24•0•0•Updated Oct 15, 2025Oct 15, 2025

• invoke-atomicredteam

  Public

  redcanaryco/invoke-atomicredteam’s past year of commit activity
  Invoke-AtomicRedTeam is a PowerShell module to execute tests as defined in the [atomics folder](https://github.com/redcanaryco/atomic-red-team/tree/master/atomics) of Red Canary's Atomic Red Team project.

  PowerShell

  •

  MIT License

  •232•986•9•2•Updated Sep 8, 2025Sep 8, 2025

• redcanary-ebpf-sensor

  Public
  Red Canary's eBPF Sensor

  sensorebpfedr-solutions

  C

  •

  GNU General Public License v2.0

  •15•112•0•0•Updated Jun 10, 2025Jun 10, 2025

• helm-charts

  Public
  Red Canary's Public Helm Chart Repository

  Smarty

  •

  BSD 3-Clause "New" or "Revised" License

  •1•1•0•0•Updated Apr 24, 2025Apr 24, 2025

• chain-reactor

  Public
  Chain Reactor is an open source framework for composing executables that simulate adversary behaviors and techniques on Linux endpoints.

  linuxsecurityelf+ 4mitresecurity-testingmitre-attackadversary-simulation

  C

  •

  MIT License

  •36•323•3•2•Updated Apr 8, 2025Apr 8, 2025

• AtomicTestHarnesses

  Public
  Public Repo for Atomic Test Harness

  PowerShell

  •

  BSD 3-Clause "New" or "Revised" License

  •47•281•1•2•Updated Apr 8, 2025Apr 8, 2025

• surveyor

  Public
  A cross-platform baselining, threat hunting, and attack surface analysis tool for security teams.

  Python

  •

  MIT License

  •71•245•10•5•Updated Mar 31, 2025Mar 31, 2025

• red-canary-aws-resource-discovery

  Public
  Go

  •

  BSD 3-Clause "New" or "Revised" License

  •2•1•0•1•Updated Dec 19, 2024Dec 19, 2024

• redcanary-response-utils

  Public
  Tools to automate and/or expedite response.

  security-toolsedr

  Python

  •

  MIT License

  •34•115•6•2•Updated Jul 5, 2024Jul 5, 2024

• ansible-atomic-red-team

  Public
  This project is an Ansible Role to execute Atomic Red Team tests against multiple machines by wrapping Invoke-AtomicRedTeam

  Shell

  •

  MIT License

  •3•27•0•2•Updated Jul 4, 2024Jul 4, 2024

• gh-action-publish-gem-on-tag

  Public
  A Github action for publishing to the package registry on tag pushes

  Shell

  •6•1•0•0•Updated Jul 4, 2024Jul 4, 2024

• rtlshtree

  Public
  C++

  •

  BSD 3-Clause "New" or "Revised" License

  •2•3•0•0•Updated Jul 4, 2024Jul 4, 2024

• openapi

  Public
  Public API clients for connecting to the Red Canary APIs

  Python

  •

  MIT License

  •6•7•0•3•Updated Jul 4, 2024Jul 4, 2024

• vscode-attack

  Public
  Visual Studio Code extension for MITRE ATT&CK

  TypeScript

  •

  BSD 3-Clause "New" or "Revised" License

  •10•54•5•3•Updated Jul 3, 2024Jul 3, 2024

• exploit-primitive-playground

  Public
  C

  •

  MIT License

  •14•64•0•0•Updated Jul 3, 2024Jul 3, 2024

• oxidebpf

  Public archive
  A Rust library for managing eBPF programs.

  ebpfrust-crate

  Rust

  •

  BSD 3-Clause "New" or "Revised" License

  •13•123•0•0•Updated Feb 26, 2024Feb 26, 2024

• homebrew-cask

  Public
  A CLI workflow for the administration of macOS applications distributed as binaries

  Ruby

  •

  BSD 2-Clause "Simplified" License

  •11k•0•0•0•Updated Jun 30, 2023Jun 30, 2023

• timescale

  Public archive
  The timescaledb gem. Pack of helpers to work with TimescaleDB extension in Ruby.

  Ruby

  •

  MIT License

  •28•0•0•1•Updated Jan 18, 2023Jan 18, 2023

• Azure-Sentinel

  Public archive
  Cloud-native SIEM for intelligent security analytics for your entire enterprise.

  Jupyter Notebook

  •

  MIT License

  •3.5k•8•0•15•Updated Aug 23, 2022Aug 23, 2022

• protobuf

  Public archive
  Protocol Buffers - Google's data interchange format

  C++

  •

  Other

  •16k•1•0•2•Updated May 13, 2022May 13, 2022

• cbconnect-2019

  Public archive
  Ruby

  •2•7•0•3•Updated Apr 4, 2022Apr 4, 2022

• cb-event-forwarder

  Public archive
  Subscribe to raw Carbon Black event feed and forward to another system, such as Splunk, etc.

  JavaScript

  •

  Other

  •44•8•0•1•Updated Feb 17, 2021Feb 17, 2021

• public-research

  Public archive
  Public repository for Red Canary Research

  securitysecurity-research

  C

  •

  MIT License

  •10•37•0•0•Updated Oct 29, 2020Oct 29, 2020

• zendesk_api_client_rb

  Public archive
  Official Ruby Zendesk API Client

  Ruby

  •

  Apache License 2.0

  •184•4•0•0•Updated Aug 31, 2020Aug 31, 2020

• wwhf

  Public archive
  Exercises for C# Workshop at Wild West Hackin' Fest 2018 & 2019.

  HTML

  •20•64•0•0•Updated Oct 28, 2019Oct 28, 2019

• cb-response-smb1-utility

  Public archive
  A simple utility to check the status of and/or disable SMBv1 on Windows system via Cb Response's Live Response functionality.

  Python

  •

  MIT License

  •6•15•1•0•Updated May 28, 2019May 28, 2019

• activerecord5-redshift-adapter

  Public archive
  Ruby

  •

  Other

  •160•1•0•0•Updated May 22, 2019May 22, 2019