This repository contains four automated security tools developed to mitigate endpoint risks and enhance threat visibility.
- Goal: Detect unauthorized movement of sensitive data.
- Tech: Python, Watchdog API, SHA-256 Hashing.
- Key Feature: Real-time file integrity monitoring and keyword-based DLP.
- Goal: Block unauthorized USB storage devices.
- Tech: Python, Pyudev (Linux).
- Key Feature: Automated port-blocking based on hardware serial number whitelisting.
- Goal: Detect malware persistence in the Windows Registry.
- Tech: Python, Winreg.
- Key Feature: Monitors "Run" keys and alerts on unauthorized autostart changes.
- Goal: Automate the collection of malicious IOCs.
- Tech: Python, Requests, URLHaus API.
- Key Feature: Generates a standardized blocklist (CSV) for firewall integration.