fireeye / CVE-2021-44228Links
OpenIOC rules to facilitate hunting for indicators of compromise
☆37Updated 3 years ago
Alternatives and similar repositories for CVE-2021-44228
Users that are interested in CVE-2021-44228 are comparing it to the libraries listed below
Sorting:
- CSIRT Jump Bag☆26Updated last year
- ☆120Updated 2 weeks ago
- A tool to modify timestamps in a packet capture to a user selected date☆31Updated 4 years ago
- Corelight@Home script☆45Updated 2 years ago
- ☆77Updated last week
- Rip Raw is a small tool to analyse the memory of compromised Linux systems.☆133Updated 3 years ago
- My Jupyter Notebooks☆36Updated 8 months ago
- Python library for threat intelligence☆90Updated 10 months ago
- A series of PowerShell scripts to automate collection of forensic artefacts in most Incident Response environments☆65Updated 3 years ago
- Recon Hunt Queries☆79Updated 4 years ago
- Browser Shortcuts for Cyber Security Related Online Services☆78Updated 4 years ago
- Ingesting Shodan Monitor Alerts to Microsoft Sentinel☆34Updated 2 years ago
- Endpoint detection for remote hosts for consumption by RITA and Elasticsearch☆80Updated last month
- A collection of tips for using MISP.☆74Updated 11 months ago
- Attack Range to test detection against nativel serverless cloud services and environments☆35Updated 4 years ago
- A python script to acquire multiple aws ec2 instances in a forensically sound-ish way☆38Updated 4 years ago
- A tool that allows you to document and assess any security automation in your SOC☆47Updated last year
- Collects a listing of MITRE ATT&CK Techniques, then discovers Splunk ESCU detections for each technique☆68Updated last year
- Invoke-Forensics provides PowerShell commands to simplify working with the forensic tools KAPE and RegRipper.☆115Updated last year
- Collection of walkthroughs on various threat hunting techniques☆75Updated 5 years ago
- Use Terraform to Provision Your Own Cloud-Based Remote Browsing Workstation☆26Updated last year
- CyberChef - Detection Engineering, TI, DFIR, Malware Analysis Edition☆65Updated 3 years ago
- Track progress and keep notes while working through likethecoins' CTI Self Study Plan☆29Updated 3 years ago
- RRR (Rapid Response Reporting) is a collection of Incident Response Report objects. They are designed to help incident responders provid…☆37Updated 3 years ago
- Powershell Scripts to work on Crowdstrike Falcon that pull back raw data relevant to forensic investigation☆23Updated 11 months ago
- Synthetic Adversarial Log Objects: A Framework for synthentic log generation☆85Updated last year
- ☆42Updated 2 years ago
- Create alerts in The Hive from your Graylog alerts, to be turned into Hive cases.☆45Updated 5 years ago
- An example of how to deploy a Detection as Code pipeline using Sigma Rules, Sigmac, Gitlab CI, and Splunk.☆59Updated 3 years ago
- A community event for security researchers to share their favorite notebooks☆109Updated last year