Timestomping malware detection framework + arena with RL agent baselines, based on Doctor Who.
python golang terraform incident-response dfir sysmon ntfs sigma doctor-who blue-team mitre-attack ocsf tamper-evident threat-detection detection-engineering usn-journal timestomping whoniverse
-
Updated
Jun 12, 2026 - Python