Indicators of compromise, YARA rules, and Python scripts to supplement the SANS CTI Summit 2021 talk: "xStart when you're ready".
☆14Jul 12, 2021Updated 5 years ago
Alternatives and similar repositories for SANSCTISummit2021-xStart
Users that are interested in SANSCTISummit2021-xStart are comparing it to the libraries listed below. We may earn a commission when you buy through links labeled 'Ad' on this page.
Sorting:
- Python 3 library to build YARA rules.☆14Oct 24, 2021Updated 5 years ago
- A tool to help malware analysts signature unique parts of RTF documents☆29Jan 5, 2026Updated 10 months ago
- Resources for SANS CTI Summit 2021 presentation☆104Nov 8, 2023Updated 2 years ago
- Triage automation for suspect URLs☆13Jul 23, 2019Updated 7 years ago
- Exporting MISP event attributes to yara rules usable with Thor apt scanner☆25Mar 27, 2017Updated 9 years ago
- Deploy on Railway without the complexity - Free Credits Offer • AdConnect your repo and Railway handles the rest with instant previews. Quickly provision container image services, databases, and storage volumes.
- This directory contains presentations and related materials of my speaking engagements. I also use this to record historical presentation…☆18Feb 13, 2025Updated last year
- Steezy - Ghetto Yara Generation☆15Mar 27, 2023Updated 3 years ago
- Take a list of URIs and print all the of the paths☆10Sep 30, 2026Updated last month
- Python libraries for Windows system coding☆14May 13, 2020Updated 6 years ago
- Repository of tools, YARA rules, and code-snippets from Stairwell's research team.☆24Jan 31, 2024Updated 2 years ago
- FRAC and RIFT☆17Mar 16, 2019Updated 7 years ago
- Emulates the VirusTotal "vt" YARA module for livehunt rule debugging/testing☆23May 29, 2023Updated 3 years ago
- A Synapse Rapid Power-Up that allows Synapse to interact with Assemblyline v4.☆10Apr 13, 2024Updated 2 years ago
- Low budget VirusTotal Intelligence Cosplay☆20Jan 6, 2022Updated 4 years ago
- Wordpress hosting with auto-scaling - Free Trial Offer • AdFully Managed hosting for WordPress and WooCommerce businesses that need reliable, auto-scalable performance. Cloudways SafeUpdates now available.
- Persistent twitter monitor tool for 2021 SANS OSINT Summit Talk☆19Mar 3, 2022Updated 4 years ago
- ☆12Jun 29, 2021Updated 5 years ago
- TIM is a Kusto investigation platform that enables a user to quickly pivot between data sources; annotate their findings; and promotes co…☆23Aug 7, 2024Updated 2 years ago
- ☆24Oct 30, 2024Updated 2 years ago
- A high-performance warninglist lookup engine that checks indicators of compromise (IOCs) against MISP warninglists. It identifies false p…☆14Apr 5, 2026Updated 7 months ago
- RenameLocalVars is an IDA plugin that renames local variables to something easier to read.☆15Jul 9, 2023Updated 3 years ago
- Scripts to aid analysis of files obfuscated with ScatterBee.☆25Jan 6, 2023Updated 3 years ago
- A collection of cyberchef recipes for use in osint investigations☆14Jul 2, 2022Updated 4 years ago
- My collection of scripts for Ghidra (https://github.com/NationalSecurityAgency/ghidra)☆11Sep 13, 2020Updated 6 years ago
- Deploy to Railway using AI coding agents - Free Credits Offer • AdUse Claude Code, Codex, OpenCode, and more. Autonomous software development now has the infrastructure to match with Railway.
- Quick lookup files for SUNBURST Backdoor☆12Dec 15, 2020Updated 5 years ago
- Ladon POC Moudle CVE-2019-11043 (PHP-FPM + Ngnix)☆16Nov 11, 2019Updated 6 years ago
- Simple yara rule manager☆67Dec 27, 2022Updated 3 years ago
- notes on applied computer security☆11Jun 27, 2023Updated 3 years ago
- A Golang API for TheHive☆13Sep 3, 2020Updated 6 years ago
- Network security visualization tool, showcasing live traffic between internal and external hosts in a real-time visualization.☆27Apr 11, 2023Updated 3 years ago
- Ansible playbook to convert Sigma rules to ElastAlert rules☆10Feb 5, 2021Updated 5 years ago
- Splunk integration with MISP☆11Apr 14, 2018Updated 8 years ago
- Network Forensics Workshop Files☆17Apr 21, 2015Updated 11 years ago
- GPU virtual machines on DigitalOcean Gradient AI • AdGet to production fast with high-performance AMD and NVIDIA GPUs you can spin up in seconds. The definition of operational simplicity.
- Simple Ansible playbook and role for setting a software channel and upgrading RouterOS on mikrotik devices☆13Aug 1, 2022Updated 4 years ago
- Private Search Set (PSS) is an extension to standard Bloom filter or a standalone hash file to describe and share private set.☆16Jan 10, 2025Updated last year
- A collection of Covid-19 related threat intelligence and resources.☆19Jul 17, 2020Updated 6 years ago
- A script to assist in processing forensic RAM captures for malware triage☆26Feb 4, 2021Updated 5 years ago
- Fingerprint anything on a network perspective☆17Oct 2, 2026Updated last month
- A modular Karton Framework service that unpacks common packers like UPX and others using the Qiling Framework.☆58May 24, 2021Updated 5 years ago
- Scripts to automate standing up apache2 with mod_rewrite in front of C2 servers.☆47Feb 17, 2021Updated 5 years ago