PritomDas / Cyber-Attack-Attribution-with-Machine-LearningLinks
Cyber attack attribution is the process of attempting to trace back a piece of code or malware to a perpetrator of a cyberattack. As cyber attacks have become more prevalent, cyber attack attribution becomes more valuable. The process of cyber attack attribution can be done using reverse engineering. From the metadata of the malware executable f…
☆15Updated 4 years ago
Alternatives and similar repositories for Cyber-Attack-Attribution-with-Machine-Learning
Users that are interested in Cyber-Attack-Attribution-with-Machine-Learning are comparing it to the libraries listed below
Sorting:
- Further investigation in to APT campaigns disclosed by private security firms and security agencies☆87Updated 3 years ago
- Import Mitre Att&ck into Neo4j database☆39Updated 3 years ago
- A python app to predict Att&ck tactics and techniques from cyber threat reports☆128Updated 2 years ago
- ☆67Updated 7 years ago
- Repository of Yara rules created by the Stratosphere team☆29Updated 4 years ago
- MEGR-APT: A Memory-Efficient APT Hunting System Based on Attack Representation Learning☆55Updated 4 months ago
- VolMemLyzer (Volatility Memory Analyzer) is a feature extraction module which use Volatility plugins to extract memory features to genera…☆36Updated last month
- Python scripts for Malware Bazaar☆157Updated last year
- ☆25Updated 2 years ago
- A Self-Contained Open-Source Cyberattack Experimentation Testbed☆43Updated 7 months ago
- Code for the paper "EMBERSim: A Large-Scale Databank for Boosting Similarity Search in Malware Analysis"☆38Updated 2 years ago
- Code for shelLM tool☆57Updated 11 months ago
- This repository contains OpenIOC rules to aid in hunting for indicators of compromise and TTPs focused on Advanced Persistent Threat grou…☆26Updated 2 years ago
- C2 Active Scanner☆59Updated last year
- YaraScanner is a file pattern-matching tool based on YARA rules.☆60Updated 2 years ago
- Indicators of Compromise for malware documented in whitepapers.☆40Updated last month
- An Adaptive Misuse Detection System☆46Updated last year
- Code for Benchmarking two ML Approaches performing Authorship Attribution☆43Updated 3 years ago
- TIE is a machine learning model for inferring associated MITRE ATT&CK techniques from previously observed techniques.☆64Updated 8 months ago
- File analysis and management framework.☆92Updated 2 years ago
- Community modules for CAPE Sandbox☆108Updated last week
- Security ML models encoded as Yara rules☆216Updated 2 years ago
- The project will serve as a central repository for VMware Threat Analysis Unit (TAU) to share threat intelligence with the security commu…☆17Updated 2 years ago
- Hatching Triage public command-line utility and API library.☆74Updated 2 years ago
- This tool maps a file's behavior on MITRE ATT&CK matrix.☆59Updated 5 years ago
- Source code used at TweetFeed.live☆47Updated 3 years ago
- A curated list of malware repositories, trackers and malware analysis tools☆93Updated 2 years ago
- This repository is for Indicators of Compromise (IOCs) from Zscaler ThreatLabz public reports☆75Updated last month
- Generate JSON force-directed/ node graph data from MITRE's ATTACK framework and visualize it interactively☆38Updated 8 months ago
- Linux based vulnerabilities (CVE) exploit detection through runtime security using Falco/Osquery/Yara/Sigma☆21Updated 2 years ago