Neo23x0 / exotron
Sandbox feature upgrade with the help of wrapped samples
☆76Updated 6 years ago
Alternatives and similar repositories for exotron:
Users that are interested in exotron are comparing it to the libraries listed below
- A repo to hold some scripts pertaining WMI (Windows implementation of WBEM) forensics☆86Updated 7 years ago
- Repository for my ATT&CK analysis research.☆69Updated 5 years ago
- A collection of infosec related scripts and information.☆53Updated 7 months ago
- Theat hunting notes in flat file format and mapped to MITRE's ATT&CK IDs☆42Updated 6 years ago
- References for FIRST CTI 2019 Symposium presentation☆22Updated 6 years ago
- Python tool and library to help analyze files during malware triage and analysis.☆78Updated 4 years ago
- Shows command lines used by latest instances analyzed on Hybrid-Analysis☆43Updated 6 years ago
- Various Modules & Scripts for use with Viper Framework☆27Updated 5 years ago
- This is a repository from Adam Swan and I's presentation on Windows Logs Zero 2 Hero.☆22Updated 7 years ago
- Mystique may be used to discover infection markers that can be used to vaccinate endpoints against malware. It receives as input a malici…☆82Updated 7 years ago
- Mitre Att&ck Technique Emulation☆82Updated 6 years ago
- Generate ATT&CK Navigator layer file from PowerShell Empire agent logs☆49Updated 6 years ago
- ☆53Updated 4 years ago
- Python IOC Editor☆62Updated 10 years ago
- A MITRE Caldera plugin written in Python 3 used to convert Red Canary Atomic Red Team Tests to MITRE Caldera Stockpile YAML ability files…☆71Updated 3 years ago
- Tools for the Computer Incident Response Team☆144Updated 8 years ago
- Generate a Yara rule to find base64-encoded files containg a specific keyword☆40Updated 6 years ago
- PowerShell No Agent Hunting☆110Updated 7 years ago
- Various config files obtained during malware analysis☆67Updated 6 years ago
- ☆36Updated 8 years ago
- Malware Repository Framework☆99Updated 7 years ago
- Some IR notes☆73Updated 8 years ago
- InvestigationPlaybookSpec☆72Updated 7 years ago
- ☆59Updated 6 years ago
- Primary data pipelines for intrusion detection, security analytics and threat hunting☆86Updated 3 years ago
- PowerGRR is an API client library in PowerShell working on Windows, Linux and macOS for GRR automation and scripting.☆56Updated 3 years ago
- A collection of typical false positive indicators☆55Updated 4 years ago
- Splunk integration with MISP☆12Updated 7 years ago
- A Yara rule generator for finding related samples and hunting☆158Updated 2 years ago
- ☆27Updated 7 years ago