edr-testing

EDR Lab for Experimentation Purposes

a tool to help operate in EDRs' blind spots

Cyber Range including Velociraptor + HELK system with a Windows VM for security testing and R&D. Azure and AWS terraform support.

Stealthier variation of Module Stomping and Module Overloading injection techniques that reduces memory IoCs. Implemented in Python ctypes

Easy to extend initial access scenario to help with EDR testing on Linux and Mac

Ransomware simulation framework built in Python. Includes encryption, exfiltration, and C2 server capabilities to test and validate EDR detections in controlled environments.