CERT-Bund / yara-exporter
Exporting MISP event attributes to yara rules usable with Thor apt scanner
☆24Updated 7 years ago
Alternatives and similar repositories for yara-exporter:
Users that are interested in yara-exporter are comparing it to the libraries listed below
- Command-line Interface for Binar.ly☆37Updated 8 years ago
- Useful scripts, rules etc. for use with YARA☆27Updated 4 years ago
- Checks observables/ioc in TheHive/Cortex against the MISP warningslists☆14Updated 7 years ago
- Extract information from MISP via the API☆15Updated 8 years ago
- ☆22Updated 7 years ago
- YETI (Your Everyday Threat Intelligence) Integration to Elastic Stack☆16Updated 4 years ago
- Historical Observations of Actionable Reputation Data☆13Updated 6 years ago
- Automation for VirusTotal☆31Updated 8 years ago
- Some rules, scripts of some use to us☆9Updated 4 months ago
- ☆19Updated 6 years ago
- Generate bulk YARA rules from YAML input☆22Updated 5 years ago
- Splunk integration with MISP☆12Updated 6 years ago
- FireEye Alert json files to MISP Malware information sharing plattform (Alpha)☆32Updated 7 years ago
- Indicators of compromise relating to our report on APT10's targeting of global MSPs☆10Updated 7 years ago
- Bro PCAP Processing and Tagging API☆28Updated 7 years ago
- ☆27Updated 7 years ago
- A collection of my public YARA signatures for various malware families☆29Updated 6 months ago
- A collection of Python utilities for use in scripts related to working with "indicators of compromise" (IOCs).☆17Updated 6 years ago
- ☆16Updated 10 years ago
- Validate IOC from MISP ; Export results and iocs to SIEM and sensors using syslog and CEF format☆14Updated 8 years ago
- Maltego Transform to put entities into MISP events☆26Updated 3 years ago
- Multiple rules for yara-project for detect compiler/packer/protector☆33Updated 5 years ago
- IDS Utility Belt For Automating/Testing Various Things☆30Updated 4 years ago
- Shows command lines used by latest instances analyzed on Hybrid-Analysis☆43Updated 6 years ago
- ☆14Updated 6 years ago
- This repository regroups the Yara Rules for the Unprotect Project☆24Updated 4 years ago
- ☆24Updated 2 years ago
- Validates yara rules and tries to repair the broken ones.☆39Updated 4 years ago
- A Python script for indexing (putting) FireEye alert data into Elasticsearch...and notifying you too.☆16Updated 6 years ago
- This project contains code for comparing or ranking APT capabilities and operational capacity. The metrics are meant to quantify, rank, o…☆35Updated 6 years ago