AhmetPayaslioglu / YaraRulesLinks
☆22Updated 2 years ago
Alternatives and similar repositories for YaraRules
Users that are interested in YaraRules are comparing it to the libraries listed below
Sorting:
- Repository for archiving Cobalt Strike configuration☆35Updated this week
- A collection of Tools and Rules for decoding Brute Ratel C4 badgers☆66Updated 3 years ago
- ☆18Updated last year
- WptsExtensions.dll for exploiting DLL hijacking of the task scheduler.☆55Updated 4 years ago
- A project created with an aim to emulate and test exfiltration of data over different network protocols.☆31Updated 2 years ago
- Default Detections for EDR☆97Updated last year
- ATLAS - Malware Analysis Description☆21Updated 2 years ago
- My Malware Analysis Reports☆25Updated 3 years ago
- CyberWarFare Labs hands-on workshop on the topic "Detecting Adversarial Tradecrafts/Tools by leveraging ETW"☆51Updated 3 years ago
- This is a repo for fetching Applocker event log by parsing the win-event log☆31Updated 3 years ago
- This repo will contain the core detection, only for Cobaltstrike's leaked versions. Non-leaked version detections wont be shared☆89Updated 2 years ago
- Searching .evtx logs for remote connections☆24Updated 2 years ago
- Depending on the AV/EPP/EDR creating a Taskschedule Job with a default cradle is often flagged☆88Updated 3 years ago
- Golang bindings for PE-sieve☆42Updated 2 years ago
- A simple command line program to help defender test their detections for network beacon patterns and domain fronting☆70Updated 3 years ago
- Finding secrets in kernel and user memory☆116Updated 2 years ago
- ☆43Updated 3 years ago
- CIS Benchmark testing of Windows SIEM configuration☆45Updated 2 years ago
- A repo to house files for our blogposts on blog.nviso.eu☆74Updated 10 months ago
- Extract payload URLs from Follina (CVE-2022-30190) docx and rtf files☆31Updated 3 years ago
- Placeholder for my detection repo and misc detection engineering content☆42Updated 2 years ago
- Cobalt Strike profile generator using Jenkins to automate the heavy lifting☆38Updated 2 years ago
- Multi-threaded C2 framework built in Flask with keylogger - from the Offensive C# Course by Naga Sai Nikhil☆21Updated 3 years ago
- 🐾Dogwalk PoC (using diagcab file to obtain RCE on windows)☆79Updated 3 years ago
- ☆14Updated 3 years ago
- Triaging Windows event logs based on SANS Poster☆42Updated 2 months ago
- Malware Analysis tools☆26Updated last year
- ☆19Updated 2 years ago
- Detecting Cobalt Strike Team Servers on targets through traffic telemetry.☆22Updated last year
- Check for NotProxyShell CVE-2022-40140 & CVE-2022-41082☆26Updated 3 years ago