br-data / 2019-winnti-analyseLinks
Scripts and rulesets for analysing the Winnti malware
☆24Updated 6 years ago
Alternatives and similar repositories for 2019-winnti-analyse
Users that are interested in 2019-winnti-analyse are comparing it to the libraries listed below
Sorting:
- Simple yara rule manager☆66Updated 3 years ago
- Steezy - Ghetto Yara Generation☆15Updated 2 years ago
- AttackMatrix is a Python module and/or webpage to interact with and explore MITRE's ATT&CK's matrices.☆17Updated 2 years ago
- Threat intelligence and threat detection indicators (IOC, IOA)☆52Updated 5 years ago
- Malware similarity platform with modularity in mind.☆80Updated 4 years ago
- A collection of typical false positive indicators☆56Updated 5 years ago
- Core server components for Assemblyline 4 (Alerter, dispatcher, expiry, ingester, scaler, updater, ...)☆21Updated this week
- pollen - A command-line tool for interacting with TheHive☆36Updated 6 years ago
- Community modules for FAME☆65Updated last month
- References for FIRST CTI 2019 Symposium presentation☆23Updated 6 years ago
- Creating a Feed of MISP Events from ThreatFox (by abuse.ch)☆19Updated 4 years ago
- A rewrite of mactime, a bodyfile reader☆39Updated last year
- YETI (Your Everyday Threat Intelligence) Integration to Elastic Stack☆16Updated 5 years ago
- Dashboards for conducting forensic investigation using windows events in Kibana☆18Updated 6 years ago
- CyCAT.org API back-end server including crawlers☆29Updated 2 years ago
- Random hunting ordiented yara rules☆98Updated 2 years ago
- A collection of my public YARA signatures for various malware families☆30Updated last year
- Standardized Malware Analysis Tool☆56Updated 4 years ago
- command line tool to use the DNSDB Flexible Search API extensions.☆16Updated last year
- A YARA Rule Performance Measurement Tool☆61Updated last year
- Defensomania is a security monitoring and incident response card game.☆63Updated 2 years ago
- Proofpoint - Emerging Threats - Threat Research tools + publicly shared intel and documentation☆81Updated 4 months ago
- VSCode extension for the YARA pattern matching language☆63Updated 2 years ago
- ☆16Updated last year
- Repository with selected IOCs and YARA rules for threat hunting.☆35Updated 8 months ago
- CIRCL system forensic tools or a jumble of tools to support forensic☆41Updated 3 years ago
- The aim of this repository is to provide a list of examples of tools, sources and measures available to incident response teams☆64Updated 5 years ago
- threat-intelligence.eu website and repository of information about open standards, documents, methodologies and processes in threat intel…☆49Updated 2 months ago
- ☆128Updated 11 months ago
- Generate a Yara rule to find base64-encoded files containg a specific keyword☆40Updated 7 years ago