JSCU-NL / COATHANGER
IOCs and detection script for COATHANGER malware
☆54Updated last year
Alternatives and similar repositories for COATHANGER:
Users that are interested in COATHANGER are comparing it to the libraries listed below
- orc2timeline extracts and analyzes artifacts contained in archives generated with DFIR-ORC.exe to create a timeline from them☆33Updated last week
- 🧰 ESXi Testing Tookit is a command-line utility designed to help security teams test ESXi detections.☆73Updated 2 weeks ago
- MS Graph Commands and Tools for Blue Teamers☆49Updated last year
- A repository of curated lists with elements such as IoCs to use for threat hunting & detection queries.☆34Updated 9 months ago
- ☆74Updated last month
- A web application that allows the users to check whether their SPF, DMARC and DKIM configuration is set up correctly.☆142Updated this week
- A simple tool designed to create Atomic Red Team tests with ease.☆40Updated last month
- Leveraging MISP indicators via a pDNS-based infrastructure as a poor man’s SOC.☆51Updated 4 months ago
- This repository contains supplemental items including IOCs, and signatures discussed in Huntress blogposts, and other media.☆37Updated 3 weeks ago
- information about ransomware groups (Ransomware Analysis Notes)☆37Updated last year
- FJTA (Forensic Journal Timeline Analyzer) is a tool that analyzes Linux filesystem (EXT4, XFS) journals (not systemd-journald), generates…☆63Updated last month
- Tools and scripts to deploy and manage OpenRelik instances☆13Updated 2 months ago
- create a "simulated internet" cyber range environment☆16Updated last week
- NoDelete is a tool that assists in malware analysis by locking a folder where malware drops files before deleting them.☆45Updated 4 months ago
- The core backend server handling API requests and task management☆39Updated 2 weeks ago
- Finding ClickFix and FakeCAPTCHA like it's 1999☆35Updated this week
- Baseline a Windows System against LOLBAS☆26Updated last year
- Detection rule validation☆41Updated last year
- This project is an Ansible Role to execute Atomic Red Team tests against multiple machines by wrapping Invoke-AtomicRedTeam☆27Updated 10 months ago
- Collection of Remote Management Monitoring tool artifacts, for assisting forensics and investigations☆87Updated 9 months ago
- VTC - Velociraptor Timeline Creator☆18Updated 11 months ago
- Quick ESXi Log Parser☆19Updated 4 months ago
- SubCrawl is a modular framework for discovering open directories, identifying unique content through signatures and organizing the data w…☆51Updated 5 months ago
- The Eventlog Compendium is the go-to resource for understanding Windows Event Logs.☆35Updated 2 weeks ago
- ServiceLens is a Python tool for analyzing services linked to Microsoft 365 domains. It scans DNS records like SPF and DMARC to identify …☆77Updated 6 months ago
- Linux #rootkit and #malware revealer☆24Updated 9 months ago
- DEFCON 31 slide deck and video link☆60Updated 10 months ago
- DFIR ORC PARSER PROJECT☆25Updated 2 months ago
- Repository documenting how Threat Intelligence and / or a Threat Intelligence Platform can prove its value to an organisation.☆51Updated 6 months ago
- Rapid7 Labs operates as the division of Rapid7 focused on threat research. It is renowned for providing comprehensive threat intelligence…☆60Updated last month