ericyoc / gen_dga_regex_and_yara_rules_pocLinks
A demonstration of domain generation algorithm (DGA) and determing regular expression and yara rule for each dga.
☆16Updated last year
Alternatives and similar repositories for gen_dga_regex_and_yara_rules_poc
Users that are interested in gen_dga_regex_and_yara_rules_poc are comparing it to the libraries listed below
Sorting:
- On demand query API for https://github.com/davidonzo/Threat-Intel project.☆57Updated last year
- Cyber Threat Intelligence Data, Indicators, and Analysis☆107Updated last week
- Actively hunt for attacker infrastructure by filtering Shodan results with URLScan data.☆63Updated last year
- This repository is for Indicators of Compromise (IOCs) from Zscaler ThreatLabz public reports☆78Updated this week
- ☆52Updated 5 months ago
- Really can protect from ransomware encryption?☆46Updated last year
- URL fingerprinting made easy☆90Updated last year
- BlueBox Malware analysis Box and Cyber threat intelligence.☆46Updated 3 years ago
- Lupo - Malware IOC Extractor. Debugging module for Malware Analysis Automation☆105Updated 3 years ago
- Newly registered Domain Monitoring to detect phishing and brand impersonation with subdomain enumeration and source code scraping☆63Updated 3 months ago
- ☆34Updated 2 months ago
- multi-threaded script uses VirusTotal and AbuseIPDB APIs and generate an excel with all needed data☆10Updated 2 years ago
- IOC Stream and Command and Control Database Containing Command and Control (C2) Servers Detected Daily by ThreatMon.☆69Updated 2 years ago
- Helping Incident Responders hunt for potential persistence mechanisms on UNIX-based systems.☆17Updated 2 years ago
- Data breaches, Leaks, Malwares Forums List <Please Use Vpn/TOR don't click on Link directly bad OPSEC>☆58Updated 4 months ago
- PacketSifter is a tool/script that is designed to aid analysts in sifting through a packet capture (pcap) to find noteworthy traffic. Pac…☆93Updated 4 years ago
- Packet captures of malicious traffic for analysis using Wireshark☆64Updated 2 years ago
- Fast IOC and YARA Scanner☆88Updated 5 years ago
- Small web frontend for using openAI's GPT-3.5 and GPT-4's API☆59Updated 9 months ago
- This Repository consists all Public Cheatsheets created by BlackPerl DFIR Content Team☆20Updated last year
- ☆57Updated 3 years ago
- Kaze's openly available CVE vulnerability data.☆15Updated 9 months ago
- Building a consolidated RSS feed for articles about cyberattacks☆73Updated this week
- Shortemall is a Python-based tool that automates the process of scanning hidden content of Short URLs.☆90Updated last year
- Ransomware groups posts☆44Updated this week
- Further investigation in to APT campaigns disclosed by private security firms and security agencies☆87Updated 3 years ago
- Library of threat hunts to get any user started!☆46Updated 5 years ago
- Data from Dark Web Marketplace scraping - Be careful☆43Updated last year
- yara detection rules for hunting with the threathunting-keywords project☆157Updated 8 months ago
- Signature based honeypot detector tool written in Golang☆107Updated 10 months ago