Soocile

Feel free to share your thoughts and suggestions.

Unless an unexpected problem arises, we plan to release it on the first day of 2027.

Targeting Windows 10/11 x64-bit operating systems. And you are right windows driver signing requirements are brutal. I plan to overcome this barrier by securing investment from foundations (like NLNet, etc.) and institutions. The kernel-driver now works we have tested it via vmware workstation pro at driver test signing mode with driver verifier flags enabled.[Still though some edge-cases may be occur] So the kernel-sensor is ready for deployment now we are mostly working with the PhantomEDR - XDR - Home product splits - additional features for home users and more various protection features for endpoints. We'll see how things progress - Stay in contact.

Built from scratch - custom kernel minifilter with 70+ modules, behavioral engine with attack chain tracking , MITRE ATT&CK mapping and ETW Telemetry. Most of EDRs Kernel sensor is closed. Our kernel sensor and the usermode-agents fully open-source right now.(PhantomEDR PhantomXDR PhantomHome).