andrew2019github Goto Github PK

1book

《Web安全之机器学习入门》

a-labelled-version-of-the-adfa-ld-dataset

a labelled version of the ADFA-LD dataset for HIDS evaluation

abnormal-traffic

IDS abnormal traffic detection tensorflow

aimkit-pasted-driver

The BlackBone + Chinese spoofer paste that GreenTea denied. AimKit is a scam. GreenTea is a fraud. Don't waste your money.

al-khaser

Public malware techniques used in the wild: Virtual Machine, Emulation, Debuggers, Sandbox detection.

al-khaser-but-compiled

all credits to al-khaser tool, just reuploading the binary file

anti

Automated Integration of anti-Reversing methods in PE executables

anti-anti-vm-detection-dll

anti anti vm dll, used to hide VMWare characteristics as files, processes, services, registry values

awsctd

AWSCTD

bert-as-service

Mapping a variable-length sentence to a fixed-length vector using BERT model

bilstm_attn

blackhat2012

Blackhat 2012 Sample Codes

bluepill

BluePill: Neutralizing Anti-Analysis Behavior in Malware Dissection (Black Hat Europe 2019, TIFS 2020)

capstone

Capstone disassembly/disassembler framework: Core (Arm, Arm64, BPF, EVM, M68K, M680X, MOS65xx, Mips, PPC, RISCV, Sparc, SystemZ, TMS320C64x, Web Assembly, X86, X86_64, XCore) + bindings.

cnn_multilabel_classification

Multilabel classification based on TextCNN and Attention

cnn_sentence

CNNs for sentence classification

cnn_text_classification

Tensorflow Implementation of cnn text classification

deep-loglizer

dlog

Host log detection based on deep learning 基于LSTM神经网络模型的日志异常检测

dsefix

Windows x64 Driver Signature Enforcement Overrider

flare-vm

flow-aggregation

gbhv

Simple x86-64 VT-x Hypervisor with EPT Hooking

graphembedding

Implementation and experiments of graph embedding algorithms.

hello-world

just another repository

hidedriver

之前那份是7600的，每次编译搞得好麻烦。更新一个VS2017可以直接编译的。

hierarchical-clustering

Algorithm Agglomerative clustering works in a “bottom-up” manner. That is, each object is initially considered as a single-element cluster (leaf). At each step of the algorithm, the two clusters that are the most similar are combined into a new bigger cluster (nodes). This procedure is iterated until all points are member of just one single big cluster (root) (see figure below). The inverse of agglomerative clustering is divisive clustering, which is also known as DIANA (Divise Analysis) and it works in a “top-down” manner. It begins with the root, in which all objects are included in a single cluster. At each step of iteration, the most heterogeneous cluster is divided into two. The process is iterated until all objects are in their own

hyperbone

Minimalistic VT-x hypervisor with hooks

hypervisor-for-beginners

Intel Vt-x/EPT based thin-hypervisor for windows with minimum possible code.

hypervisor-from-scratch

Source code of a multiple series of tutorial about hypervisor. Available at: