Event Forwarding Guidance
ClamAV is an open-source antivirus engine that detects trojans, viruses, malware, and other malicious threats.
Solutions for securing endpoint devices including EDR, antivirus, and endpoint protection platforms
ClamAV is an open-source antivirus engine that detects trojans, viruses, malware, and other malicious threats.
Open-source tool for monitoring macOS hosts with detailed system activity insights.
GravityZone is a unified endpoint security and analytics platform that provides risk assessment, threat prevention, and incident response capabilities.
MetaDefender Cloud offers advanced threat prevention using technologies like Multiscanning, Deep CDR, and Sandbox.
OSSEC is a versatile HIDS known for its powerful log analysis and intrusion detection capabilities.
A tool for monitoring and managing device compliance and security across multiple platforms
Automated and flexible approach for deploying Windows 10 with security standards set by the DoD.
Advanced malware scanning and removal tool that detects and removes various types of malware and offers additional protection with HitmanPro.Alert.
ClamAV is an open-source antivirus engine that detects trojans, viruses, malware, and other malicious threats.
A set of utility programs that monitor and control the SMART system built into modern hard drives, providing proactive measures to prevent data loss.
Cloud-based virus scan APIs for securing files, URLs, and content uploads with advanced anti-virus and malware scanning capabilities.
Read-only FUSE driver for Apple File System with support for encrypted volumes and fusion drives on Linux.
An endpoint monitoring tool for Linux and macOS that reports file, socket, and process events to Zeek.
Avira Free Security is an all-in-one security, privacy, and performance app for Mac, providing real-time protection, password management, VPN, and more, all for free.
Read-only FUSE driver for Apple File System with support for encrypted volumes and fusion drives on Linux.
YARA-Endpoint is a client-server architecture tool that can be used for endpoint protection and incident response.
SentinelOne's Singularity Platform is an AI-powered enterprise security platform providing autonomous endpoint, cloud, identity, and data protection through its integrated XDR solution.
A set of utility programs that monitor and control the SMART system built into modern hard drives, providing proactive measures to prevent data loss.
A simple ransomware protection that intercepts and kills malicious processes attempting to delete shadow copies using vssadmin.exe.
Automated and flexible approach for deploying Windows 10 with security standards set by the DoD.
GravityZone is a unified endpoint security and analytics platform that provides risk assessment, threat prevention, and incident response capabilities.
Comprehensive endpoint protection solution providing advanced threat detection, proactive defense, and efficient management.