PwCUK-CTO / SANSCTISummit2021-xStartLinks
Indicators of compromise, YARA rules, and Python scripts to supplement the SANS CTI Summit 2021 talk: "xStart when you're ready".
☆14Updated 4 years ago
Alternatives and similar repositories for SANSCTISummit2021-xStart
Users that are interested in SANSCTISummit2021-xStart are comparing it to the libraries listed below
Sorting:
- Resources for SANS CTI Summit 2021 presentation☆104Updated 2 years ago
- Simple yara rule manager☆66Updated 3 years ago
- Threat intelligence and threat detection indicators (IOC, IOA)☆52Updated 5 years ago
- Incident response teams usually working on the offline data, collecting the evidence, then analyze the data☆45Updated 4 years ago
- ☆77Updated 6 years ago
- Collection of walkthroughs on various threat hunting techniques☆76Updated 5 years ago
- Python library for threat intelligence☆91Updated 11 months ago
- A tool for studying JavaScript malware.☆15Updated 3 weeks ago
- Script for parsing Symantec Endpoint Protection logs, VBNs, and ccSubSDK database.☆64Updated 3 years ago
- Random hunting ordiented yara rules☆98Updated 2 years ago
- ☆63Updated 3 years ago
- Hunt malware with Volatility☆47Updated 5 months ago
- Repository with Sample threat hunting notebooks on Security Event Log Data Sources☆70Updated 3 years ago
- ☆37Updated 5 years ago
- A Splunk Technology Add-on to forward filtered ETW events.☆30Updated 5 years ago
- ☆35Updated last year
- ☆92Updated 5 months ago
- Open source training materials for law-enforcement and organisations interested in DFIR.☆62Updated 7 months ago
- ☆23Updated 5 years ago
- A community event for security researchers to share their favorite notebooks☆109Updated last year
- Site for IWS book content☆17Updated 7 years ago
- Extract BITS jobs from QMGR queue and store them as CSV records☆73Updated 10 months ago
- Recon Hunt Queries☆79Updated 4 years ago
- Blueteam operational triage registry hunting/forensic tool.☆150Updated 4 months ago
- Various capabilities for static malware analysis.☆79Updated last year
- Tools and Binaries to use with KAPE☆13Updated 6 years ago
- Lokix Platform is a free open-source solution to help blue teams and threat hunters use Loki Scanner to sweep enterprise networks☆25Updated 5 years ago
- MasterParser is a simple, all-in-one, digital forensics artifact parser☆23Updated 4 years ago
- Stand-alone parser for User Access Logging from Server 2012 and newer systems☆78Updated last year
- Collection of useful, up to date, Carbon Black Response Queries☆84Updated 5 years ago