ckane / cyber-defense
Content for cyber defense course
☆14Updated 9 years ago
Related projects: ⓘ
- Some YARA rules i will add from time to time☆12Updated 5 years ago
- A simple ReST server to lookup threat actors (by name, synonym or UUID) and returning the corresponding MISP galaxy information about the…☆47Updated 9 months ago
- ☆28Updated 5 years ago
- Python bindings for Yeti's API☆18Updated last year
- Site for IWS book content☆18Updated 5 years ago
- A simple many-rules to many-files YARA scanner for incident response or malware zoos.☆26Updated 6 years ago
- Network Forensics Workshop Files☆17Updated 9 years ago
- Use DNS to hunt for threats including DGAs☆14Updated 8 years ago
- CIRCL system forensic tools or a jumble of tools to support forensic☆42Updated last year
- Best practices in threat intelligence☆46Updated last year
- DeployREMnux is a Python script that will deploy a cloud instance of the public REMnux distribution in the Amazon cloud (AWS).☆16Updated 4 years ago
- Knowledge base of analytics designed to cover threats based on MITRE's ATT&CK.☆22Updated 5 years ago
- Python parser for Red Canary's Atomic Red Team Yamls☆27Updated 5 years ago
- Another MISP module for Python☆17Updated 4 years ago
- Build your own threat hunting maturity model☆12Updated 6 years ago
- Home to the ActorTrackr source code☆27Updated 7 years ago
- This repository is a curated list of pro bono incident response entities.☆19Updated last year
- ☆19Updated this week
- Searches for Insider Threat Hunting☆30Updated 5 years ago
- YETI (Your Everyday Threat Intelligence) Integration to Elastic Stack☆15Updated 3 years ago
- Build Automated Machine Images for MISP☆28Updated last year
- Presentation Slides and Video links☆31Updated 2 years ago
- ☆20Updated this week
- ☆56Updated this week
- A Threat hunter's playbook to aid the development of techniques and hypothesis for hunting campaigns.☆14Updated 6 years ago
- TITO is a light framework for operationalizing threat intelligence that is platform and data agnostic.☆20Updated 4 years ago
- A few quick recipes for those that do not have much time during the day☆21Updated 3 weeks ago
- Indicators of compromise relating to our report on APT10's targeting of global MSPs☆10Updated 6 years ago
- Easy way to create a MISP event related to a Phishing page☆17Updated last year
- This module installs and configures MISP (Malware Information Sharing Platform)☆13Updated this week