MDudek-ICS / TRISIS-TRITON-HATMAN
Repository containting original and decompiled files of TRISIS/TRITON/HATMAN malware
☆235Updated 3 years ago
Alternatives and similar repositories for TRISIS-TRITON-HATMAN:
Users that are interested in TRISIS-TRITON-HATMAN are comparing it to the libraries listed below
- Triconex TriStation utilities and tools☆73Updated 6 years ago
- Moki Distribution - ICS/SCADA Tools☆107Updated 7 years ago
- GasPot Released at Blackhat 2015☆139Updated 9 months ago
- Graphical Realism Framework for Industrial Control Simulations☆219Updated 8 months ago
- snake - a malware storage zoo☆219Updated last year
- Automatic Yara Rule Generation☆331Updated 9 years ago
- Personal compilation of APT malware from whitepaper releases, documents and own research☆259Updated 6 years ago
- A collection of scripts & tools for reverse-engineering & hacking SCADA/ICS devices.☆104Updated 6 years ago
- Wraps around various tools and provides some additional checks/information to produce a centralized report of a PE file.☆205Updated 11 years ago
- A Yara rule generator for finding related samples and hunting☆158Updated 2 years ago
- VolatilityBot – An automated memory analyzer for malware samples and memory dumps☆264Updated 3 years ago
- Tools to interact with APTnotes reporting/index.☆99Updated 4 years ago
- Deception based detection techniques mapped to the MITRE’s ATT&CK framework☆289Updated 7 years ago
- Sample files for Control Things Platform☆38Updated 10 months ago
- This repository will hold PCAP IOC data related with known malware samples (owner: Bryant Smith)☆100Updated 3 years ago
- ISF(Industrial Security Exploitation Framework) is a exploitation framework based on Python.☆251Updated 4 years ago
- Set of tools for interacting with Malshare☆152Updated 4 years ago
- Open source tools for realistic-behaving electric grid honeynets☆56Updated 9 years ago
- IOC from articles, tweets for archives☆313Updated last year
- A curated list of resources related to Industrial Control System (ICS) security.☆21Updated 3 years ago
- ICS TestBed Framework☆64Updated 6 years ago
- Hollowfind is a Volatility plugin to detect different types of process hollowing techniques used in the wild to bypass, confuse, deflect …☆132Updated 2 years ago
- c2 traffic☆189Updated 2 years ago
- A tool for de-obfuscating PowerShell scripts☆67Updated 5 years ago
- This script scans the files extracted by Zeek with YARA rules located on the rules folder on a Linux based Zeek sensor, if there is a mat…☆61Updated last year
- YARA Rules I come across on the internet☆337Updated 10 months ago
- PCAP Samples for Different Post Exploitation Techniques☆354Updated 3 years ago
- ☆151Updated 6 years ago
- Industrial Control Systems Network Protocol Parsers☆161Updated last month
- Repository containing IOCs, CSV and MISP JSON from our blogs☆79Updated 3 years ago