still have to rename & test

Author: JC

Eula.txt

@@ -0,0 +1,75 @@
+Sysinternals Software License Terms
+These license terms are an agreement between Sysinternals (a wholly owned subsidiary of Microsoft Corporation) and you. Please read them. They apply to the software you are downloading from technet.microsoft.com/sysinternals, which includes the media on which you received it, if any. The terms also apply to any Sysinternals
+* updates,
+* supplements,
+* Internet-based services,
+* and support services
+for this software, unless other terms accompany those items. If so, those terms apply.
+BY USING THE SOFTWARE, YOU ACCEPT THESE TERMS. IF YOU DO NOT ACCEPT THEM, DO NOT USE THE SOFTWARE.
+If you comply with these license terms, you have the rights below.
+
+Installation and User Rights
+
+You may install and use any number of copies of the software on your devices.
+
+Scope of License
+
+The software is licensed, not sold. This agreement only gives you some rights to use the software. Sysinternals reserves all other rights. Unless applicable law gives you more rights despite this limitation, you may use the software only as expressly permitted in this agreement. In doing so, you must comply with any technical limitations in the software that only allow you to use it in certain ways. You may not
+* work around any technical limitations in the software;
+* reverse engineer, decompile or disassemble the software, except and only to the extent that applicable law expressly permits, despite this limitation;
+* make more copies of the software than specified in this agreement or allowed by applicable law, despite this limitation;
+* publish the software for others to copy;
+* rent, lease or lend the software;
+* transfer the software or this agreement to any third party; or
+* use the software for commercial software hosting services.
+
+Sensitive Information
+
+Please be aware that, similar to other debug tools that capture “process state” information, files saved by Sysinternals tools may include personally identifiable or other sensitive information (such as usernames, passwords, paths to files accessed, and paths to registry accessed). By using this software, you acknowledge that you are aware of this and take sole responsibility for any personally identifiable or other sensitive information provided to Microsoft or any other party through your use of the software.
+
+Documentation
+
+Any person that has valid access to your computer or internal network may copy and use the documentation for your internal, reference purposes.
+
+Export Restrictions
+
+The software is subject to United States export laws and regulations. You must comply with all domestic and international export laws and regulations that apply to the software. These laws include restrictions on destinations, end users and end use. For additional information, see www.microsoft.com/exporting .
+
+Support Services
+
+Because this software is "as is," we may not provide support services for it.
+
+Entire Agreement
+
+This agreement, and the terms for supplements, updates, Internet-based services and support services that you use, are the entire agreement for the software and support services.
+
+Applicable Law
+
+United States . If you acquired the software in the United States , Washington state law governs the interpretation of this agreement and applies to claims for breach of it, regardless of conflict of laws principles. The laws of the state where you live govern all other claims, including claims under state consumer protection laws, unfair competition laws, and in tort.
+Outside the United States . If you acquired the software in any other country, the laws of that country apply.
+
+Legal Effect
+
+This agreement describes certain legal rights. You may have other rights under the laws of your country. You may also have rights with respect to the party from whom you acquired the software. This agreement does not change your rights under the laws of your country if the laws of your country do not permit it to do so.
+
+Disclaimer of Warranty
+
+The software is licensed "as-is." You bear the risk of using it. Sysinternals gives no express warranties, guarantees or conditions. You may have additional consumer rights under your local laws which this agreement cannot change. To the extent permitted under your local laws, sysinternals excludes the implied warranties of merchantability, fitness for a particular purpose and non-infringement.
+
+Limitation on and Exclusion of Remedies and Damages
+
+You can recover from sysinternals and its suppliers only direct damages up to U.S. $5.00. You cannot recover any other damages, including consequential, lost profits, special, indirect or incidental damages.
+This limitation applies to
+* anything related to the software, services, content (including code) on third party Internet sites, or third party programs; and
+* claims for breach of contract, breach of warranty, guarantee or condition, strict liability, negligence, or other tort to the extent permitted by applicable law.
+
+It also applies even if Sysinternals knew or should have known about the possibility of the damages. The above limitation or exclusion may not apply to you because your country may not allow the exclusion or limitation of incidental, consequential or other damages.
+Please note: As this software is distributed in Quebec , Canada , some of the clauses in this agreement are provided below in French.
+Remarque : Ce logiciel étant distribué au Québec, Canada, certaines des clauses dans ce contrat sont fournies ci-dessous en français.
+EXONÉRATION DE GARANTIE. Le logiciel visé par une licence est offert « tel quel ». Toute utilisation de ce logiciel est à votre seule risque et péril. Sysinternals n'accorde aucune autre garantie expresse. Vous pouvez bénéficier de droits additionnels en vertu du droit local sur la protection dues consommateurs, que ce contrat ne peut modifier. La ou elles sont permises par le droit locale, les garanties implicites de qualité marchande, d'adéquation à un usage particulier et d'absence de contrefaçon sont exclues.
+LIMITATION DES DOMMAGES-INTÉRÊTS ET EXCLUSION DE RESPONSABILITÉ POUR LES DOMMAGES. Vous pouvez obtenir de Sysinternals et de ses fournisseurs une indemnisation en cas de dommages directs uniquement à hauteur de 5,00 $ US. Vous ne pouvez prétendre à aucune indemnisation pour les autres dommages, y compris les dommages spéciaux, indirects ou accessoires et pertes de bénéfices.
+Cette limitation concerne :
+tout ce qui est relié au logiciel, aux services ou au contenu (y compris le code) figurant sur des sites Internet tiers ou dans des programmes tiers ; et
+les réclamations au titre de violation de contrat ou de garantie, ou au titre de responsabilité stricte, de négligence ou d'une autre faute dans la limite autorisée par la loi en vigueur.
+Elle s'applique également, même si Sysinternals connaissait ou devrait connaître l'éventualité d'un tel dommage. Si votre pays n'autorise pas l'exclusion ou la limitation de responsabilité pour les dommages indirects, accessoires ou de quelque nature que ce soit, il se peut que la limitation ou l'exclusion ci-dessus ne s'appliquera pas à votre égard.
+EFFET JURIDIQUE. Le présent contrat décrit certains droits juridiques. Vous pourriez avoir d'autres droits prévus par les lois de votre pays. Le présent contrat ne modifie pas les droits que vous confèrent les lois de votre pays si celles-ci ne le permettent pas.

NXLOG_CE_LICENSE

@@ -0,0 +1,45 @@
+NXLOG PUBLIC LICENSE v1.0
+
+1. DEFINITIONS
+“License” shall mean version 1.0 of the NXLOG PUBLIC LICENSE, i.e. the
+terms and conditions set forth in this document; 
+“Software” shall mean the source code and object code form, all associated
+media, printed materials, and "online" or electronic documentation. All
+such software and materials are referred to herein as the "Software" and
+are copyrighted by Licensor;
+“Licensor” refers to the copyright holder of the Software, i.e. NXLog Ltd.
+
+2. GRANT OF LICENSE
+Licensor hereby grants you the following rights, provided that you comply
+with all of the restrictions set forth in this License and provided,
+further, that you distribute an unmodified copy of this License with the
+Software:
+i. You may copy and distribute verbatim (i.e. unmodified) copies of the
+Software as you receive it, in any medium;
+ii. You may modify the Software, create works based on the Software and
+distribute copies of such, in any medium.
+
+By downloading, using, modifying and copying the Software (or any work
+based on the Software), you indicate your acceptance of this license to
+do so, and all its terms and conditions for using, copying, distributing
+and modifying the Software or works based on it. Nothing other than this
+license grants you permission to modify, distribute the program or its
+derivative works. If you do not accept these terms and conditions, do not
+use, modify or distribute the Software.
+
+3. RESTRICTIONS ON COPYING, DISTRIBUTION AND USE
+The Software may be copied and distributed with or without modifications
+in source code and object code form and may be used for commercial and
+non-commercial purposes provided that the following restrictions are met:
+i. Distribution of the Software is prohibited if any payment is made in
+connection with such distribution. You may only charge a reasonable fee
+to cover the costs of copying and redistribution;
+ii. Bundling the Software with a commercial product or using it to
+provide commercial services is prohibited if your product or service
+explicitly depends on the Software to be able to operate or function.
+You may use the Software without modifications to provide commercial
+services or to bundle it with your product provided that your service or
+product can also operate or function without the Software.
+A commercial license is available if you wish to incorporate the Software
+into your product or service which explicitly depends on the Software to
+be able to operate or function.

OpenEDR.msi

@@ -1 +1,25 @@
-# FreeEDR-agents
+# Open Endpoint Defense & Response
+
+* Tested on Windows 10, Server 2012R2 to 2019
+* Protects endpoints from non-escalated file-based PE Malware (EXE/DLL) & Office-macro malware
+* Detects Living-Off-The-Land offensive techniques without hard-coded rules
+* Responds by automated or backend triggered malicious process termination 
+
+It leverages the following components & reports to [an OpenEDR server (click to find out more)](https://github.com/jymcheong/OpenEDR).
+
+## Sysmon
+Sysinternal's license: https://docs.microsoft.com/en-us/sysinternals/license-terms
+
+For non-Internet facing endpoints, please download Sysmon, modifiy `install.ps1` accordingly & host within your internal web-server.
+
+## Nxlog-CE 
+This is an archived version of NXLog-CE tested with OpenEDR client agents. For commercial deployments, please contact NXLOG for commercial license. 
+
+## Building your own installer
+- git clone this
+- change Sysmon, smconfig.xml or whatever that you need to
+- navigate to the project path (with cmd or powershell)
+- run batch file: updateInstaller.bat
+
+## Change-Log
+See https://github.com/jymcheong/OpenEDRclient/commits/master

README.md

@@ -0,0 +1,3 @@
+# Changes
+
+See https://github.com/jymcheong/OpenEDRclient/commits/master