Sh3llyR / yaraScanParserLinks
☆11Updated 4 years ago
Alternatives and similar repositories for yaraScanParser
Users that are interested in yaraScanParser are comparing it to the libraries listed below
Sorting:
- Open source training materials for law-enforcement and organisations interested in DFIR.☆63Updated 8 months ago
- Cyber Threats Detection Rules☆14Updated 4 months ago
- Incident response teams usually working on the offline data, collecting the evidence, then analyze the data☆45Updated 4 years ago
- Recon Hunt Queries☆79Updated 4 years ago
- Scripts to integrate DFIR-IRIS, MISP and TimeSketch☆34Updated 4 years ago
- Threat Box Assessment Tool☆19Updated 4 years ago
- A completely unsupported set of scripts used in SANS FOR572, Advanced Network Forensics and Analysis☆28Updated 6 months ago
- Repository with Sample threat hunting notebooks on Security Event Log Data Sources☆69Updated 3 years ago
- The Intelligent Process Lifecycle of Active Cyber Defenders☆33Updated 3 years ago
- Collection of scripts used to analyse malware or emails☆20Updated 5 years ago
- Quick script to build host or investigation timelines using Carbon Black Response☆12Updated 7 years ago
- Easy way to create a MISP event related to a Phishing page☆17Updated 2 years ago
- A collection of tips for using MISP.☆75Updated last year
- ☆39Updated 6 years ago
- ☆18Updated 4 years ago
- Synopsis is a tool to aid analysts reviewing browser history files by providing a high-level “synopsis” of key information.☆22Updated 7 years ago
- Simple yara rule manager☆66Updated 3 years ago
- ☆19Updated 5 years ago
- Hunt malware with Volatility☆47Updated 6 months ago
- A collection of my public YARA signatures for various malware families☆30Updated last year
- An experimental script to perform bulk parsing of arbitrary file features with YARA and console logging.☆21Updated 3 years ago
- A new Cyber Threat Intelligence Capability Maturity Model (CTI-CMM) to empower your team and create lasting value. Inspired by Industry N…☆42Updated 2 weeks ago
- A collection of typical false positive indicators☆56Updated 5 years ago
- CSIRT Jump Bag☆27Updated last year
- Creating a Feed of MISP Events from ThreatFox (by abuse.ch)☆19Updated 4 years ago
- Resources for SANS CTI Summit 2021 presentation☆104Updated 2 years ago
- My Jupyter Notebooks☆36Updated 10 months ago
- ☆37Updated 5 years ago
- Searches for Insider Threat Hunting☆30Updated 6 years ago
- Use DNS to hunt for threats including DGAs☆15Updated 10 years ago