Alternatives and similar repositories for iocs

Users that are interested in iocs are comparing it to the libraries listed below

• Cyb3r-Monk / ACCD
  Active C&C Detector
  ☆156Updated 2 years ago
• Sam0x90 / CB-Threat-Hunting
  CarbonBlack EDR detection rules and response actions
  ☆72Updated last year
• mthcht / ThreatHunting-Keywords-yara-rules
  yara detection rules for hunting with the threathunting-keywords project
  ☆149Updated 4 months ago
• mthcht / ThreatIntel-Reports
  Raw data from Threat Intelligence Reports with automatic reports collection and keyword search across thousands of reports
  ☆137Updated this week
• tsale / Sigma_rules
  Sigma rules to share with the community
  ☆121Updated 8 months ago
• knight0x07 / OneNoteAnalyzer
  A C# based tool for analysing malicious OneNote documents
  ☆116Updated 2 years ago
• CTI-Driven / LOLBins
  The LOLBins CTI-Driven (Living-Off-the-Land Binaries Cyber Threat Intelligence Driven) is a project that aims to help cyber defenders und…
  ☆125Updated last year
• rapid7 / Rapid7-Labs
  Rapid7 Labs operates as the division of Rapid7 focused on threat research. It is renowned for providing comprehensive threat intelligence…
  ☆71Updated 3 months ago
• Neo23x0 / YARA-Style-Guide
  A specification and style guide for YARA rules
  ☆56Updated last year
• RussianPanda95 / Configuration_extractors
  Configuration Extractors for Malware
  ☆113Updated 5 months ago
• stuxnet999 / volatility-binaries
  Contains compiled binaries of Volatility
  ☆35Updated 4 months ago
• bricerenaud / xdr_yara_rule_matching
  custom Python script to perform Yara matching in Cortex XDR
  ☆14Updated 4 years ago
• reecdeep / segugio
  Segugio allows the execution and tracking of critical steps in the malware detonation process, from clicking on the first stage to extrac…
  ☆150Updated last year
• splunk / ShellSweep
  ShellSweeping the evil.
  ☆179Updated 10 months ago
• yarox24 / EvtxHussar
  Initial triage of Windows Event logs
  ☆102Updated last year
• ShadowOpCode / Malware-Analysis-Toolkit
  Collection of scripts to automate the Malware Analysis process
  ☆27Updated last month
• BushidoUK / Ransomware-Vulnerability-Matrix
  A collection of CVEs weaponized by ransomware operators
  ☆125Updated last month
• magicsword-io / LOLBASline
  Baseline a Windows System against LOLBAS
  ☆68Updated last year
• Hexastrike / EventWhisper
  A Windows Event Log MCP
  ☆37Updated last month
• embee-research / Yara-detection-rules
  Yara Rules for Modern Malware
  ☆79Updated last year
• bobby-tablez / TTP-Threat-Feeds
  Threat feeds designed to extract adversarial TTPs and IOCs, using: ✨AI✨
  ☆37Updated last week
• LOLESXi-Project / LOLESXi
  LOLESXi is a curated compilation of binaries/scripts available in VMware ESXi that are were used to by adversaries in their intrusions. T…
  ☆132Updated 8 months ago
• nasbench / Misc-Research
  A collection of tools, scripts and personal research
  ☆146Updated 2 months ago
• AlbinoGazelle / esxi-testing-toolkit
  🧰 ESXi Testing Tookit is a command-line utility designed to help security teams test ESXi detections.
  ☆78Updated 5 months ago
• RussianPanda95 / Yara-Rules
  Repository of Yara Rules
  ☆123Updated 3 weeks ago
• Bournemouth2600 / Detection-Engineering-Intro
  An introduction to detection engineering
  ☆13Updated 9 months ago
• QueenSquishy / plague
  Default Detections for EDR
  ☆96Updated last year
• NextronSystems / evtx-baseline
  A repository hosting example goodware evtx logs containing sample software installation and basic user interaction
  ☆80Updated 4 months ago
• S3N4T0R-0X0 / APT28-Adversary-Simulation
  This is a simulation of attack by Fancy Bear group (APT28) targeting high-ranking government officials Western Asia and Eastern Europe
  ☆36Updated last year
• HarfangLab / iocs
  Indicators of compromise
  ☆15Updated last month