0x4d31 GitHub

security engineering · detection & response

Adel Karimi

I’m a security engineering lead focused on building detection and response systems at scale. I’ve worked in security since 2009, most of that in D&R. Currently leading D&R at Perplexity; previously an MTS at OpenAI and a Security Engineer and Tech Lead at Google.

selected-oss 10 items
  1. 01 Numbat Visibility into AI agent activity on endpoints, with on-device detection, pre-action blocking, and forensic reconstruction. write-up
  2. 02 Stinger Unprivileged endpoint deception for macOS and Linux using FIFO baits, local traps, and protected sessions.
  3. 03 Bumblebee Read-only developer endpoint scanner for package, extension, and developer-tool metadata. write-up
  4. 04 Santamon Lightweight macOS detection agent built on Santa’s Endpoint Security telemetry.
  5. 05 Finch TLS reverse proxy for client fingerprinting and real-time traffic actions: block, reroute, tarpit, or deceive.
  6. 06 Venator Kubernetes-native threat detection system that runs detection rules as scheduled jobs. write-up
  7. 07 Galah LLM-powered web honeypot for generating realistic responses to arbitrary HTTP requests.
  8. 08 airFP Open-source IEFP implementation for fingerprinting Wi-Fi implementations from management frames. IEFP write-up
  9. 09 FATT Network metadata and fingerprint extraction from pcaps and live traffic. RDP fingerprinting write-up
  10. 10 HASSH Co-developer of HASSH, the SSH client/server fingerprinting standard. utils patent

the rest lives on github.com/0x4D31