MBCProject / mbc-stix2
MBC v2.x expressed in STIX 2.1 JSON
☆15Updated last year
Alternatives and similar repositories for mbc-stix2:
Users that are interested in mbc-stix2 are comparing it to the libraries listed below
- A tool to help malware analysts signature unique parts of RTF documents☆29Updated 2 weeks ago
- Steezy - Ghetto Yara Generation☆15Updated last year
- Malware similarity platform with modularity in mind.☆76Updated 3 years ago
- Shows command lines used by latest instances analyzed on Hybrid-Analysis☆43Updated 6 years ago
- Generate a Yara rule to find base64-encoded files containg a specific keyword☆41Updated 6 years ago
- TA505 unpacker Python 2.7☆47Updated 4 years ago
- Modular command-line threat hunting tool & framework.☆17Updated 4 years ago
- Information about most important hunts which can be performed by Threat hunters while searching for any adversary/threats inside the orga…☆15Updated 5 years ago
- YARA Rule Strings Statistics Calculator and Malware Research Helper☆12Updated 3 years ago
- ☆24Updated 2 years ago
- Python 3 library to build YARA rules.☆13Updated 3 years ago
- An extendable tool to extract and aggregate IoCs from threat feeds☆33Updated 11 months ago
- Low budget VirusTotal Intelligence Cosplay☆20Updated 3 years ago
- Generate YARA rules for OOXML documents.☆37Updated last year
- Create an entire YARA rule via Python? Whhhhhhaatttt?☆72Updated 6 years ago
- Validates yara rules and tries to repair the broken ones.☆39Updated 4 years ago
- ☆14Updated 6 years ago
- pollen - A command-line tool for interacting with TheHive☆35Updated 5 years ago
- Handy scripts to speed up malware analysis☆35Updated last year
- An Incident Response tool that visualizes historic process execution evidence (based on Event ID 4688 - Process Creation Event) in a tree…☆59Updated 6 years ago
- Merge all Yara rules from official Yara github repository in one .yar file☆28Updated 6 years ago
- A Modular MWDB Utility to Collect Fresh Malware Samples☆34Updated 3 years ago
- Maltego transforms to pivot between PE files based on their VirusTotal codeblocks☆18Updated 3 years ago
- Pythonic way to work with the warning lists defined there: https://github.com/MISP/misp-warninglists☆32Updated 2 weeks ago
- ConventionEngine - A Yara Rulepack for PDB Path Hunting☆37Updated last year
- This repository regroups the Yara Rules for the Unprotect Project☆24Updated 4 years ago
- Historical Observations of Actionable Reputation Data☆13Updated 6 years ago
- Collection of scripts used to analyse malware or emails☆19Updated 4 years ago
- A mapping of used malware names to commonly known family names☆62Updated last year
- A collection of threat intelligence data such as IOC, Yara and Snort/Suricata Rules etc.☆10Updated 5 years ago