CptOfEvilMinions / ThreatHuntingEQLandBro
Threat hunting with EQL and Bro. This repo contains modifications to EQL and EQLLib to use BRO logs.
☆8Updated 5 years ago
Related projects ⓘ
Alternatives and complementary repositories for ThreatHuntingEQLandBro
- A list of IOCs applicable to PoshC2☆24Updated 4 years ago
- ☆22Updated 3 years ago
- Check IOC provided by a MISP instance on Suricata events☆17Updated 5 years ago
- Presentation materials for talks I've given.☆20Updated 5 years ago
- Threat Mitigation Strategies☆25Updated last year
- Crowdstrike Falcon Host script for iterating through instances to get alert and other relevant data☆13Updated 5 years ago
- Conceptual Methods for Finding Commonalities in Macho Files☆12Updated 8 months ago
- Speaking materials from conferences I've given☆9Updated 2 years ago
- ☆14Updated 6 years ago
- ☆24Updated 2 years ago
- Links to malware-related YARA rules☆14Updated 2 years ago
- C# User Simulation☆33Updated 2 years ago
- ☆12Updated 3 years ago
- Notebooks created to attack and secure Active Directory environments☆27Updated 5 years ago
- Hundred Days of Yara Challenge☆12Updated 2 years ago
- Python parser for Red Canary's Atomic Red Team Yamls☆27Updated 5 years ago
- ☆12Updated 5 years ago
- ☆19Updated 4 years ago
- A collection of threat intelligence data such as IOC, Yara and Snort/Suricata Rules etc.☆10Updated 5 years ago
- Scripts to help hunt for possible golden/silver TGT tickets☆16Updated 7 years ago
- An extendable tool to extract and aggregate IoCs from threat feeds☆32Updated 9 months ago
- Analytics for Accounting logs from Network devices☆16Updated 3 years ago
- Indicators of compromise relating to our report on APT10's targeting of global MSPs☆10Updated 7 years ago
- ☆12Updated 6 years ago
- Converts Sigma detection rules to a Splunk alert configuration.☆13Updated 3 years ago
- Carving tool based in Radare2 & Yara☆15Updated 6 years ago
- Yara rules☆20Updated last year
- Generate bulk YARA rules from YAML input☆22Updated 4 years ago
- Winterfell hunt is a python script to perform auto threat hunting for malicious activities in windows OS based on collected data by winte…☆14Updated 4 years ago