advanced-threat-research / Ripple-20-Detection-Logic
Ripple20 Critical Vulnerabilities - Detection Logic and Signatures
☆12Updated 3 years ago
Alternatives and similar repositories for Ripple-20-Detection-Logic:
Users that are interested in Ripple-20-Detection-Logic are comparing it to the libraries listed below
- A Yara Lua output script for Suricata☆19Updated 5 years ago
- Audit Powershell and search from known keywords in history #Blueteam☆25Updated 4 years ago
- ☆41Updated 2 years ago
- Notebooks created to attack and secure Active Directory environments☆27Updated 5 years ago
- Old home of LimaCharlie, open source EDR☆30Updated last year
- ☆30Updated 6 years ago
- Look into EDR events from network☆23Updated 10 months ago
- Generic Signature Format for SIEM Systems☆17Updated last year
- Threat Mapping Catalogue☆17Updated 3 years ago
- ☆53Updated 5 years ago
- A CALDERA plugin for ATT&CK Evaluations Round 1☆33Updated last year
- Cybersecurity Incidents Mind Maps☆33Updated 3 years ago
- Remote Desktop Client Fingerprint script for Zeek. Based off of https://github.com/0x4D31/fatt☆39Updated last year
- A Python application to filter and transfer Zeek logs to Elastic/OpenSearch+Humio. This app can also output pure JSON logs to stdout for…☆34Updated 2 years ago
- ☆12Updated 3 years ago
- This repository aims to collect and document indicators from the different C2's listed in the C2-Matrix☆72Updated 3 years ago
- The Fastest way to consume Threat Intel☆25Updated 2 years ago
- Automated detection rule analysis utility☆29Updated 2 years ago
- Analytics for Accounting logs from Network devices☆16Updated 3 years ago
- Threat Detection & Anomaly Detection rules for popular open-source components☆50Updated 2 years ago
- Suricata rule and intel index☆30Updated 2 months ago
- Bro integration with osquery☆15Updated last year
- go-atomicredteam is a Golang application to execute tests as defined in the atomics folder of Red Canary's Atomic Red Team project (https…☆49Updated last year
- Hunt for Keywords , Mutex, Windows Event,Registry Keys,Process,Schedule tasks in Windows Machine☆22Updated 2 months ago
- Tool to read EVTX files including SYSMON and convert to JSON, MISP Objects and Graph stream☆11Updated 4 years ago
- A tool to assess data quality, built on top of the awesome OSSEM.☆76Updated 2 years ago
- BloodHound Cypher Queries Ported to a Jupyter Notebook☆53Updated 4 years ago
- Python parser for Red Canary's Atomic Red Team Yamls☆27Updated 6 years ago
- Check Sigma rules for easy-to-bypass whitelists to make them more robust (https://github.com/SigmaHQ/sigma)☆15Updated 4 years ago
- ATT&CK Evaluations website (DEPRECATED)☆59Updated 3 years ago