WithSecureLabs / iocs
☆15Updated 10 months ago
Alternatives and similar repositories for iocs:
Users that are interested in iocs are comparing it to the libraries listed below
- Cyber Threats Detection Rules☆14Updated last month
- my MSTICpy practice and custom tools repository☆11Updated 3 months ago
- An experimental script to perform bulk parsing of arbitrary file features with YARA and console logging.☆21Updated 2 years ago
- VTC - Velociraptor Timeline Creator☆15Updated 9 months ago
- Assist analyst and threat hunters to understand Windows authentication logs and to analyze brutforce scenarios.☆18Updated last year
- ☆20Updated 2 years ago
- Repo with supporting material for the talk titled "Cracking the Beacon: Automating the extraction of implant configurations"☆11Updated last week
- ☆20Updated last year
- PowerShell 'Hero': scripts for DFIR and automation with a PowerShell menu example.☆36Updated last year
- Accelerating the collection, processing, analysis and outputting of digital forensic artefacts.☆32Updated 2 weeks ago
- ☆15Updated 3 years ago
- SkillAegis is a platform to design, run, and monitor exercise scenarios, enhancing skills in applications like MISP and training users in…☆22Updated this week
- Converts Sigma detection rules to a Splunk alert configuration.☆13Updated 3 years ago
- ☆14Updated last year
- Offensive Research Guide to Help Defense Improve Detection☆30Updated 2 years ago
- Scripts to integrate DFIR-IRIS, MISP and TimeSketch☆33Updated 3 years ago
- Library of threat hunts to get any user started!☆42Updated 4 years ago
- A repository containing the research output from my GCFE Gold Paper which compared Windows 10 and Windows 11.☆26Updated 2 years ago
- Just Another broken Registry Parser (JARP)☆16Updated 8 months ago
- Scripts and lists to help generate YARA friendly string mutations☆20Updated last year
- Random tips and tricks RE: ransomware☆14Updated 3 years ago
- Scripts to for ready-to-use Velociraptor instance deployment in Azure☆13Updated last year
- An experimental Velociraptor implementation using cloud infrastructure☆23Updated this week
- Automation script to download JSON MISP files from a SFTP server and import them via API to a MISP instance.☆15Updated last year
- Sigma detection rules for hunting with the threathunting-keywords project☆53Updated 3 weeks ago
- Threat Box Assessment Tool☆19Updated 3 years ago
- 100 Days of YARA to be updated with rules & ideas as the year progresses☆58Updated 2 years ago
- A script to assist in processing forensic RAM captures for malware triage☆27Updated 4 years ago
- This repository aims to collect and document indicators from the different C2's listed in the C2-Matrix☆72Updated 3 years ago
- IOCPARSER.COM is a Fast and Reliable service that enables you to extract IOCs and intelligence from different data sources.☆34Updated 3 years ago