Click any tag below to further narrow down your results
Links
LUMEN is a tool for analyzing Windows Event Logs directly on your computer. It allows you to upload and analyze EVTX files, run SIGMA detections, and extract indicators of compromise, all without sending data online. The application supports multi-file uploads and offers features for guided investigations and custom rule management.
Malcontent is a tool designed to detect supply-chain malware using context analysis and differential methods. It supports various file formats and programming languages, analyzing Linux programs primarily, but also works with macOS and Windows. It features three modes: analyze, diff, and scan, allowing for in-depth examination of program capabilities and risks.
SQL Arena is a project that provides comparative data on different database vendors to help users choose the right database for their projects. It uses a tool called DBProve to gather performance metrics and offers insights into query execution and database behavior. Contributors can share results and enhance the analysis tools.
This article examines a dataset of over 100 trillion tokens from the OpenRouter platform to understand how large language models (LLMs) are used in practice. It highlights trends in model adoption, task categories, and user retention patterns, revealing a shift towards more complex interactions and the impact of early user engagement.
This GitHub repository provides an open-source dataset of over 20,000 identified malicious software packages. It includes samples from npm, PyPI, and IDE extensions, along with tools for analysis. Users can check package versions for malicious intent and must handle the software with caution.
Lnav is a terminal-based log file viewer that simplifies the process of analyzing and monitoring log files by decompressing, merging, and indexing them. It provides various interactive features such as error highlighting, regular expression searching, and SQLite analysis to enhance log file exploration. Users can install lnav easily on multiple operating systems and utilize it with systemd-journald for efficient log management.
Microsoft Application Inspector is a tool designed to analyze software source code by identifying features based on a comprehensive set of over 400 rules and regex patterns. It aids in understanding software components for both security and non-security purposes and supports various programming languages, offering output in multiple formats. The tool is available as a command line application and NuGet package, and emphasizes community contributions for enhancing its feature detection capabilities.