Tracking APT IOCs
☆25Nov 16, 2020Updated 5 years ago
Alternatives and similar repositories for ThreatIntelligence
Users that are interested in ThreatIntelligence are comparing it to the libraries listed below. We may earn a commission when you buy through links labeled 'Ad' on this page.
Sorting:
- Scripts, Yara rules and other files developed during malware investigations☆28Aug 19, 2022Updated 4 years ago
- Steezy - Ghetto Yara Generation☆15Mar 27, 2023Updated 3 years ago
- ☆22Dec 22, 2020Updated 5 years ago
- Exporting MISP event attributes to yara rules usable with Thor apt scanner☆25Mar 27, 2017Updated 9 years ago
- ☆13Nov 10, 2020Updated 5 years ago
- 1-Click AI Models by DigitalOcean Gradient • AdDeploy popular AI models on DigitalOcean Gradient GPU virtual machines with just a single click. Zero configuration with optimized deployments.
- Notes and IoCs of fresh malware☆63Jul 5, 2024Updated 2 years ago
- WslinkVMAnalyzer is a tool to facilitate analysis of code protected by a virtual machine featured in Wslink malware☆49Jun 5, 2022Updated 4 years ago
- A command-line tool for parsing Windows Event Logs and importing the results into Elasticsearch.☆89Oct 2, 2026Updated last week
- A PowerShell script to prevent Sysmon from writing its events☆16Apr 23, 2020Updated 6 years ago
- Reverse engineered source code of the autochk rootkit☆213Nov 1, 2019Updated 6 years ago
- Vuls Beater for Elasticsearch - connecting vuls☆17Dec 15, 2020Updated 5 years ago
- All in one - Malware + Analysis by Cylance☆11Nov 23, 2018Updated 7 years ago
- This repository contains various files linked to Operation Shadowhammer as it was originally discovered by Kaspersky Team.☆12Mar 27, 2019Updated 7 years ago
- IOC from articles, tweets for archives☆318Dec 12, 2023Updated 2 years ago
- Deploy on Railway without the complexity - Free Credits Offer • AdConnect your repo and Railway handles the rest with instant previews. Quickly provision container image services, databases, and storage volumes.
- Creating a Feed of MISP Events from ThreatFox (by abuse.ch)☆18Jun 2, 2021Updated 5 years ago
- MITRE ATT&CK visualizations☆12Jan 28, 2022Updated 4 years ago
- Simple ElasticSearch API for Golang☆15Dec 3, 2018Updated 7 years ago
- Build Automated Machine Images for MISP☆29Jun 9, 2023Updated 3 years ago
- A collection of Indicators of Compromise (IoCs), most aligning with samples derived from the signatures in the YARA-Signatures repo☆30Jun 11, 2020Updated 6 years ago
- Official resource of the paper "Traditional and Context-Specific Spam Detection in Low Resource Settings", Machine Learning Journal 2022☆12Jun 11, 2022Updated 4 years ago
- a very simple rootkit for fun☆19Nov 6, 2018Updated 7 years ago
- The Multiplatform Linux Sandbox☆16Dec 19, 2023Updated 2 years ago
- CLI interface to get Ransomware attacks data from ransomwhat.telemetry.ltd☆13Feb 8, 2023Updated 3 years ago
- Deploy on Railway without the complexity - Free Credits Offer • AdConnect your repo and Railway handles the rest with instant previews. Quickly provision container image services, databases, and storage volumes.
- ☆21Apr 19, 2024Updated 2 years ago
- Hunt malware with Volatility☆53Mar 3, 2026Updated 7 months ago
- ☆15Jun 5, 2019Updated 7 years ago
- At some point, I learned about a method to perform a binary search on a file in order to identify its AV signature and change it to bypas…☆35Aug 3, 2020Updated 6 years ago
- A simple bookshelf made in CSS, HTML and vanilla JS.☆12May 2, 2022Updated 4 years ago
- Simple decrypter for strings used in SamSam Ransomware samples.☆18Feb 21, 2020Updated 6 years ago
- YARA Language Server☆75Feb 3, 2026Updated 8 months ago
- Various config files obtained during malware analysis☆68Oct 31, 2018Updated 7 years ago
- RemotePSpy provides live monitoring of remote PowerShell sessions, which is particularly useful for older (pre-5.0) versions of PowerShel…☆19Mar 12, 2020Updated 6 years ago
- Managed hosting for WordPress and PHP on Cloudways • AdManaged hosting for WordPress, Magento, Laravel, or PHP apps, on multiple cloud providers. Deploy in minutes on Cloudways by DigitalOcean.
- Vaccine for STOP/DJVU ransomware, prevents encryption☆27Oct 30, 2025Updated 11 months ago
- ☆71Nov 17, 2016Updated 9 years ago
- Telsy CTI Research Team☆57Dec 15, 2020Updated 5 years ago
- This repository contains analysis scripts, YARA rules, and additional IoCs related to our Telekom Security blog posts.☆121Mar 4, 2026Updated 7 months ago
- Analysis Reports of Malwares☆15Jun 21, 2019Updated 7 years ago
- WIP - A tutorial for OWASP ZAP☆13Feb 12, 2020Updated 6 years ago
- Updates the Emerging Threats open ruleset for Suricata☆10Sep 20, 2015Updated 11 years ago