This repository contains all public indicators identified by 401trg during the course of our investigations. It also includes relevant yara rules and ids signatures to detect these indicators.
☆120Apr 14, 2021Updated 5 years ago
Alternatives and similar repositories for detections
Users that are interested in detections are comparing it to the libraries listed below. We may earn a commission when you buy through links labeled 'Ad' on this page.
Sorting:
- This repository contains tools used by 401trg.☆21Apr 14, 2021Updated 5 years ago
- domain information in JSON format☆10Jun 7, 2017Updated 9 years ago
- Providing timelines based on OSINT Reports☆32Jun 21, 2023Updated 3 years ago
- Threat hunting repo for my independent study on threat hunting with OSQuery☆27Jan 16, 2018Updated 8 years ago
- CIF v3 -- the fastest way to consume threat intelligence☆189Apr 20, 2023Updated 3 years ago
- Wordpress hosting with auto-scaling - Free Trial Offer • AdFully Managed hosting for WordPress and WooCommerce businesses that need reliable, auto-scalable performance. Cloudways SafeUpdates now available.
- ☆17Jun 8, 2018Updated 8 years ago
- The repository contains IOCs in CSV format for APT, Cyber Crimes, Malware and Trojan and whatever I found as part of hunting and research☆12Jun 10, 2017Updated 9 years ago
- DPS' Lightweight Investigation Notebook☆433Dec 31, 2023Updated 2 years ago
- ☆10Dec 28, 2015Updated 10 years ago
- Exporting MISP event attributes to yara rules usable with Thor apt scanner☆25Mar 27, 2017Updated 9 years ago
- Repository to provide files related to our blog articles.☆17Sep 23, 2026Updated last month
- FireEye Publicly Shared Indicators of Compromise (IOCs)☆470Jan 19, 2019Updated 7 years ago
- FRAC and RIFT☆17Mar 16, 2019Updated 7 years ago
- A taxonomy and dictionary of malware behaviors.☆43Aug 20, 2019Updated 7 years ago
- Managed hosting for WordPress and PHP on Cloudways • AdManaged hosting for WordPress, Magento, Laravel, or PHP apps, on multiple cloud providers. Deploy in minutes on Cloudways by DigitalOcean.
- Create Suricata and Snort DNS signatures given a single domain or list of domains in a file.☆18Nov 13, 2017Updated 8 years ago
- dnssinkholelist is a python package focused on combining open source lists of malicious domains, dynamic dns domains, and advertisement d…☆18Apr 13, 2016Updated 10 years ago
- Defanged Indicator of Compromise (IOC) Extractor.☆584Aug 28, 2024Updated 2 years ago
- ☆34Jun 22, 2021Updated 5 years ago
- Understanding ATT&CK Matrix for Enterprise☆79May 16, 2018Updated 8 years ago
- A threat hunting / data analysis environment based on Python, Pandas, PySpark and Jupyter Notebook.☆251Jul 19, 2021Updated 5 years ago
- A collection of YARA rules we wish to share with the world, most probably referenced from http://blog.inquest.net.☆389May 11, 2022Updated 4 years ago
- Extract and aggregate threat intelligence.☆932May 26, 2026Updated 5 months ago
- pocket guide for core threat hunting concepts☆23May 6, 2020Updated 6 years ago
- Managed Kubernetes at scale on DigitalOcean • AdDigitalOcean Kubernetes includes the control plane, bandwidth allowance, container registry, automatic updates, and more for free.
- An informational repo about hunting for adversaries in your IT environment.☆1,899Nov 17, 2021Updated 4 years ago
- My personal experience in Threat Hunting and knowledge gained so far.☆19May 27, 2017Updated 9 years ago
- Network detector for Winnti malware☆21Mar 6, 2018Updated 8 years ago
- A set of Zeek scripts to detect ATT&CK techniques.☆625Jun 26, 2024Updated 2 years ago
- Performs OCR on image files and scans them for matches to YARA rules☆42Oct 30, 2018Updated 8 years ago
- A Python library to help with some common threat hunting data analysis operations☆141Apr 23, 2023Updated 3 years ago
- The mission of Black Lotus Labs is to leverage our network visibility to both help protect customers and keep the internet clean.☆13Jun 18, 2021Updated 5 years ago
- Yara rules☆10Dec 10, 2019Updated 6 years ago
- Yara rules I've written☆10Dec 9, 2015Updated 10 years ago
- GPUs on demand by Runpod - Special Offer Available • AdRun AI, ML, and HPC workloads on powerful cloud GPUs—without limits or wasted spend. Deploy GPUs in under a minute and pay by the second.
- Vba2Graph - Generate call graphs from VBA code, for easier analysis of malicious documents.☆283Dec 13, 2021Updated 4 years ago
- Protocol Analysis/Decoder Framework☆494Dec 19, 2022Updated 3 years ago
- Indicators from Unit 42 Public Reports☆726Aug 17, 2025Updated last year
- A community-driven, open-source project to share detection logic, adversary tradecraft and resources to make detection development more e…☆4,706Jan 12, 2026Updated 9 months ago
- Automated Tactics Techniques & Procedures☆262May 26, 2023Updated 3 years ago
- Indicators of Compromises (IOC) of our various investigations☆1,993Oct 22, 2026Updated last week
- Tools for the Computer Incident Response Team☆153Apr 17, 2017Updated 9 years ago