detection-benchmark

Here is 1 public repository matching this topic...

nuclide-research / VisorHollow

Process-injection detection benchmark for Windows x64. Two techniques (section/classic) plus a 6-tier HollowCorpus ladder. Sysmon HIT/MISS per event ID.

windows cli golang bug-bounty etw sysmon malware-research nuclide visor red-team process-injection detection-engineering edr-detection detection-benchmark nicholas-kloster

Updated Jun 8, 2026
Go

Improve this page

Add a description, image, and links to the detection-benchmark topic page so that developers can more easily learn about it.

Curate this topic

Add this topic to your repo

To associate your repository with the detection-benchmark topic, visit your repo's landing page and select "manage topics."

Learn more

Provide feedback

Saved searches

Use saved searches to filter your results more quickly

detection-benchmark

Here is 1 public repository matching this topic...

nuclide-research / VisorHollow

Improve this page

Add this topic to your repo