This repository is for Indicators of Compromise (IOCs) from Zscaler ThreatLabz public reports
☆83Oct 29, 2026Updated this week
Alternatives and similar repositories for iocs
Users that are interested in iocs are comparing it to the libraries listed below. We may earn a commission when you buy through links labeled 'Ad' on this page.
Sorting:
- Indicators of compromise☆19May 18, 2026Updated 5 months ago
- Tools developed by the Zscaler ThreatLabz Threat Intelligence team☆111Sep 30, 2026Updated last month
- Yara Rules for Modern Malware☆81Mar 3, 2024Updated 2 years ago
- An Archive of Ransomware Notes Past and Present Collected by Zscaler ThreatLabz☆426Aug 13, 2026Updated 2 months ago
- Collection of generic YARA rules☆16Mar 18, 2026Updated 7 months ago
- GPU virtual machines on DigitalOcean Gradient AI • AdGet to production fast with high-performance AMD and NVIDIA GPUs you can spin up in seconds. The definition of operational simplicity.
- Indicators of Compromise (IOCs) accompanying HP Threat Research blog posts and reports.☆29Apr 10, 2024Updated 2 years ago
- IOC Collection 2022☆57Mar 7, 2023Updated 3 years ago
- ☆67Sep 10, 2026Updated last month
- Indicators of Compromise☆294Updated this week
- Sigma detection rules for hunting with the threathunting-keywords project☆61Mar 2, 2025Updated last year
- Signatures and IoCs from public Volexity blog posts.☆376Oct 13, 2026Updated 2 weeks ago
- Sophos-originated indicators-of-compromise from published reports☆674Oct 20, 2026Updated last week
- Repository with selected IOCs and YARA rules for threat hunting.☆35Apr 8, 2026Updated 6 months ago
- ☆21Aug 27, 2026Updated 2 months ago
- Deploy to Railway using AI coding agents - Free Credits Offer • AdUse Claude Code, Codex, OpenCode, and more. Autonomous software development now has the infrastructure to match with Railway.
- Basic Wireshark LUA dissector for TriStation Protocol☆11Jun 19, 2018Updated 8 years ago
- ☆62Jun 24, 2023Updated 3 years ago
- A collection of my yara rules☆34Jul 11, 2023Updated 3 years ago
- A collection of companies that disclose adversary TTPs after they have been breached☆306Sep 20, 2026Updated last month
- Repo with supporting material for the talk titled "Cracking the Beacon: Automating the extraction of implant configurations"☆11Feb 6, 2025Updated last year
- Contains Actual Events and Codes of Threat Groups, APTs, Research Groups☆20Sep 10, 2022Updated 4 years ago
- Collection of Remote Management Monitoring tool artifacts, for assisting forensics and investigations☆105Aug 15, 2025Updated last year
- Indicators of Compromises (IOC) of our various investigations☆1,993Oct 22, 2026Updated last week
- Convert Sigma rules to SIEM queries, directly in your browser.☆124Oct 24, 2026Updated last week
- Managed hosting for WordPress and PHP on Cloudways • AdManaged hosting for WordPress, Magento, Laravel, or PHP apps, on multiple cloud providers. Deploy in minutes on Cloudways by DigitalOcean.
- ☆22Jun 2, 2023Updated 3 years ago
- Some YARA rules i will add from time to time☆68Mar 25, 2023Updated 3 years ago
- ☆512Oct 7, 2024Updated 2 years ago
- Scripts and lists to help generate YARA friendly string mutations☆23Apr 9, 2023Updated 3 years ago
- Read Windows message table entries.☆11Feb 5, 2023Updated 3 years ago
- Welcome to the SEKOIA.IO Community repository!☆198Oct 21, 2026Updated last week
- ☆22Dec 22, 2020Updated 5 years ago
- Listing of YARA rules I wrote for Live and Retro hunts. Includes Jupyter infostealer, suspicious powershell, dll hijacking, vbs downloade…☆17Oct 14, 2026Updated 2 weeks ago
- Repository to store the Threat Reports made by the McAfee Enterprise ATR Team☆10Oct 11, 2018Updated 8 years ago
- Virtual machines for every use case on DigitalOcean • AdGet dependable uptime with 99.99% SLA, simple security tools, and predictable monthly pricing with DigitalOcean's virtual machines, called Droplets.
- A collection of CVEs weaponized by ransomware operators☆156Aug 30, 2026Updated 2 months ago
- Standard-Format Threat Intelligence Feeds☆135Updated this week
- Script to pull newly-registered domains and check for similarity against a provided word list.☆13Aug 2, 2020Updated 6 years ago
- ☆191Feb 6, 2024Updated 2 years ago
- A repository dedicated to tracking ransomware families based on leaked builders.☆22Apr 17, 2024Updated 2 years ago
- SubCrawl is a modular framework for discovering open directories, identifying unique content through signatures and organizing the data w…☆58Dec 5, 2024Updated last year
- Purpleteam scripts simulation & Detection - trigger events for SOC detections☆205Dec 20, 2024Updated last year