issues
search
0xrawsec
/
whids
Open Source EDR for Windows
https://rawsec.lu
GNU Affero General Public License v3.0
1.13k
stars
138
forks
source link
issues
Newest
Newest
Most commented
Recently updated
Oldest
Least commented
Least recently updated
windows 7 32 系统 报错
#135
vela-security
opened
7 months ago
0
Does Whids have a separate channel or place to store events and logs?
#134
thomasxm
opened
1 year ago
1
Bump golang.org/x/sys from 0.0.0-20190909082730-f460065e899a to 0.1.0
#133
dependabot[bot]
opened
1 year ago
0
Installation
#132
fras-alfurasy
opened
1 year ago
0
Fix Sysmon configurations link
#131
Applenice
opened
1 year ago
0
API for querying alert/log statistics
#130
pixelsquared
opened
1 year ago
0
Web UI For the EDR Manager
#129
pixelsquared
opened
1 year ago
3
service protect just like systemd in linux？
#128
hz-kelpie
closed
1 year ago
2
whids
#127
hz-kelpie
closed
1 year ago
3
Alerts/events not being log
#126
xoverride
closed
2 years ago
10
Whids Stopping Logging
#125
badboycxcc
closed
2 years ago
5
Whids service crash
#124
xoverride
closed
2 years ago
7
package refactoring needed
#123
qjerome
closed
2 years ago
0
Use context.Context in forwarder.go
#122
qjerome
closed
2 years ago
0
put action handler routine into task scheduler
#121
qjerome
closed
2 years ago
0
optimize tests for more speed
#120
qjerome
closed
1 year ago
0
Consider embedding Forwarder.Run into hids task scheduler
#119
qjerome
closed
2 years ago
0
Improve testing of hids package
#118
qjerome
closed
1 year ago
0
Bug in service name resolution
#117
qjerome
opened
2 years ago
0
Review event hooks and default field values
#116
qjerome
opened
2 years ago
0
optimize engine.XPath Set and Get
#115
qjerome
closed
2 years ago
0
Consider adding TargetImageProtected flag to ProcessAccess events
#114
qjerome
closed
2 years ago
0
review timers of scheduled routines
#113
qjerome
closed
2 years ago
0
Update ProcessAccess hook
#112
qjerome
closed
2 years ago
0
Implement rexhash command
#111
qjerome
closed
2 years ago
0
review endpoint configuration and remove deprecated settings
#110
qjerome
opened
2 years ago
0
Add /endpoints/commands/help
#109
qjerome
opened
2 years ago
0
build a minimal Sysmon agnostic configuration
#108
qjerome
closed
2 years ago
0
Sysmon binary installation / update
#107
qjerome
closed
2 years ago
0
OSQuery deployment
#106
qjerome
closed
2 years ago
0
bug in POST /rules
#105
qjerome
closed
2 years ago
1
Add information to system information
#104
qjerome
opened
2 years ago
1
API not authorized
#103
Kaputt4
opened
2 years ago
3
endpoint management fully with DB engine
#102
qjerome
closed
2 years ago
0
Code cleanup
#101
qjerome
closed
2 years ago
0
API endpoint to configure Sysmon
#100
qjerome
closed
2 years ago
0
Endpoint configuration endpoint
#99
qjerome
opened
2 years ago
0
Provide system information in /endpoint
#98
qjerome
closed
2 years ago
0
Improve IoC management
#97
qjerome
closed
2 years ago
0
Improve rule management API
#96
qjerome
closed
2 years ago
0
Track System process
#95
qjerome
closed
2 years ago
0
Build canary rules for Microsoft-Windows-Kernel-File logs
#94
qjerome
closed
2 years ago
0
Improve Microsoft-Windows-Kernel-File correlation
#93
qjerome
closed
2 years ago
0
Correlate and enrich Microsoft-Antimalware-Scan-Interface ETW logs
#92
qjerome
opened
2 years ago
0
Correlate and enrich Microsoft-Windows-Kernel-File ETW logs
#91
qjerome
closed
2 years ago
0
v1.8.0 beta5 bug
#90
qjerome
closed
2 years ago
0
404 error on whids-man
#89
GSVSenseAmidMadness
closed
2 years ago
9
OpenAPI endpoint
#88
qjerome
opened
2 years ago
0
Improve golang unit testing
#87
qjerome
closed
2 years ago
0
Fix golang unit tests
#86
qjerome
closed
2 years ago
0
Next