diff --git a/README.md b/README.md index fa31ae3..b7a8d20 100644 --- a/README.md +++ b/README.md @@ -1473,6 +1473,10 @@ This repository is created as an online bookmark for useful links, resources and mitre-attack/bzar A set of Zeek scripts to detect ATT&CK techniques. + + monnappa22/HollowFind + Hollowfind is a Volatility plugin to detect different types of process hollowing techniques used in the wild to bypass, confuse, deflect and divert the forensic analysis techniques. The plugin detects such attacks by finding discrepancy in the VAD and PEB, it also disassembles the address of entry point to detect any redirection attempts and als… + mozilla/audit-go Linux Audit Plugin for heka written using netlink Protocol in golang and Lua