Neo23x0 / exotron
Sandbox feature upgrade with the help of wrapped samples
☆75Updated 6 years ago
Alternatives and similar repositories for exotron:
Users that are interested in exotron are comparing it to the libraries listed below
- Repository for my ATT&CK analysis research.☆68Updated 5 years ago
- A collection of infosec related scripts and information.☆53Updated 3 months ago
- PowerShell No Agent Hunting☆109Updated 6 years ago
- A repo to hold some scripts pertaining WMI (Windows implementation of WBEM) forensics☆85Updated 7 years ago
- Theat hunting notes in flat file format and mapped to MITRE's ATT&CK IDs☆42Updated 6 years ago
- Python tool and library to help analyze files during malware triage and analysis.☆77Updated 4 years ago
- Shows command lines used by latest instances analyzed on Hybrid-Analysis☆43Updated 6 years ago
- This is a repository from Adam Swan and I's presentation on Windows Logs Zero 2 Hero.☆21Updated 6 years ago
- Mitre Att&ck Technique Emulation☆82Updated 5 years ago
- ☆54Updated 4 years ago
- Various Modules & Scripts for use with Viper Framework☆27Updated 5 years ago
- Generate ATT&CK Navigator layer file from PowerShell Empire agent logs☆49Updated 6 years ago
- Various config files obtained during malware analysis☆67Updated 6 years ago
- References for FIRST CTI 2019 Symposium presentation☆23Updated 5 years ago
- Mystique may be used to discover infection markers that can be used to vaccinate endpoints against malware. It receives as input a malici…☆81Updated 7 years ago
- Python parser for Red Canary's Atomic Red Team Yamls☆27Updated 5 years ago
- Some IR notes☆73Updated 8 years ago
- BTG's purpose is to make fast and efficient search on IOC☆70Updated 6 years ago
- Open Development projects for TekDefense☆77Updated 8 years ago
- Tools for the Computer Incident Response Team☆143Updated 7 years ago
- A collection of typical false positive indicators☆55Updated 4 years ago
- A MITRE Caldera plugin written in Python 3 used to convert Red Canary Atomic Red Team Tests to MITRE Caldera Stockpile YAML ability files…☆71Updated 3 years ago
- Credential Phish Analysis and Automation☆96Updated 6 years ago
- InvestigationPlaybookSpec☆72Updated 7 years ago
- ☆59Updated 5 years ago
- hopefully a source-to-source deobfuscator, aiming at deobfuscating common scripts languages such as Powershell, VBA and Javascript. Curre…☆40Updated 5 years ago