Developing the ShadowStrike Phantom EDR/XDR/Consumer Products Open Source!
Github Sponsors Available!
Github Link: https://github.com/ShadowStrike-Labs/ShadowStrike
Site: https://www.shadowstrike.dev/
For Business :[email protected]
Targeting Windows 10/11 x64-bit operating systems. And you are right windows driver signing requirements are brutal. I plan to overcome this barrier by securing investment from foundations (like NLNet, etc.) and institutions. The kernel-driver now works we have tested it via vmware workstation pro at driver test signing mode with driver verifier flags enabled.[Still though some edge-cases may be occur] So the kernel-sensor is ready for deployment now we are mostly working with the PhantomEDR - XDR - Home product splits - additional features for home users and more various protection features for endpoints.
We'll see how things progress - Stay in contact.
Built from scratch - custom kernel minifilter with 70+ modules, behavioral engine with attack chain tracking , MITRE ATT&CK mapping and ETW Telemetry. Most of EDRs Kernel sensor is closed. Our kernel sensor and the usermode-agents fully open-source right now.(PhantomEDR PhantomXDR PhantomHome).
First of all, it's great to receive such feedback from a system architect like yours! Thank you for that. I'm trying my best; it will be a long-term project, and I'm considering a serious EDR platform. As you said, I'm planning endpoint cloud systems and even custom sandbox - AI integrations for these cloud systems, but these require money, and I can't afford them right now. Also, the product is still in its early stages and has a long way to go, but I will definitely try to add them in the future. As someone familiar with EDRs, I know them inside and out. I'm also thinking of adding systems like threat management dashboards, but if I do that, I'll probably have to release it as an Enterprise version of ShadowStrike, but as I said, these are things that will happen over time. This year, I'm completely focused on Shadow Sensor; it's a really challenging area, and I'm learning a lot while trying to do a good job. Let's see how things go.