Neo23x0 / exotron
Sandbox feature upgrade with the help of wrapped samples
☆76Updated 6 years ago
Alternatives and similar repositories for exotron:
Users that are interested in exotron are comparing it to the libraries listed below
- Mystique may be used to discover infection markers that can be used to vaccinate endpoints against malware. It receives as input a malici…☆82Updated 7 years ago
- Repository for my ATT&CK analysis research.☆69Updated 5 years ago
- Shows command lines used by latest instances analyzed on Hybrid-Analysis☆43Updated 6 years ago
- A collection of infosec related scripts and information.☆53Updated 6 months ago
- A repo to hold some scripts pertaining WMI (Windows implementation of WBEM) forensics☆85Updated 7 years ago
- ☆36Updated 8 years ago
- ☆59Updated 5 years ago
- Generate ATT&CK Navigator layer file from PowerShell Empire agent logs☆49Updated 6 years ago
- A MITRE Caldera plugin written in Python 3 used to convert Red Canary Atomic Red Team Tests to MITRE Caldera Stockpile YAML ability files…☆71Updated 3 years ago
- All materials from our Black Hat 2018 "Subverting Sysmon" talk☆136Updated 6 years ago
- A collection of typical false positive indicators☆55Updated 4 years ago
- Theat hunting notes in flat file format and mapped to MITRE's ATT&CK IDs☆42Updated 6 years ago
- Python tool and library to help analyze files during malware triage and analysis.☆78Updated 4 years ago
- Repository of yara rules☆59Updated 2 years ago
- Generate a Yara rule to find base64-encoded files containg a specific keyword☆40Updated 6 years ago
- Various Modules & Scripts for use with Viper Framework☆27Updated 5 years ago
- Mitre Att&ck Technique Emulation☆82Updated 6 years ago
- Some IR notes☆73Updated 8 years ago
- References for FIRST CTI 2019 Symposium presentation☆22Updated 6 years ago
- Malware Repository Framework☆99Updated 7 years ago
- BTG's purpose is to make fast and efficient search on IOC☆70Updated 6 years ago
- ☆53Updated 4 years ago
- IR-Tools - PowerShell tools for IR☆130Updated 7 years ago
- A collection of scripts to initialize a windows VM to run all the malwares!☆106Updated 5 years ago
- ☆76Updated 6 years ago
- Various config files obtained during malware analysis☆67Updated 6 years ago
- Performs OCR on image files and scans them for matches to YARA rules☆41Updated 6 years ago
- Sysmon config for both Windows and Linux Devices. Windows one is a bit dated☆55Updated 9 months ago
- Tools for the Computer Incident Response Team☆144Updated 7 years ago
- Understanding ATT&CK Matrix for Enterprise☆80Updated 6 years ago