fr0gger / IATelligence
IATelligence is a Python script that will extract the IAT of a PE file and request GPT to get more information about the API and the ATT&CK matrix related
☆360Updated 2 years ago
Alternatives and similar repositories for IATelligence:
Users that are interested in IATelligence are comparing it to the libraries listed below
- A python script developed to process Windows memory images based on triage type.☆262Updated last year
- Jupyter Notebooks for the Blue Team☆145Updated last month
- ☆195Updated last year
- ☆515Updated 6 months ago
- Implementation of RITA (Real Intelligence Threat Analytics) in Jupyter Notebook with improved scoring algorithm.☆201Updated 2 years ago
- ☆226Updated 2 years ago
- Signatures and IoCs from public Volexity blog posts.☆353Updated 2 months ago
- ☆127Updated 2 weeks ago
- CLI tools for forensic investigation of Windows artifacts☆327Updated 5 months ago
- Different learning materials☆225Updated last month
- ☆201Updated 5 months ago
- Open Source Platform for storing, organizing, and searching documents related to cyber threats☆164Updated last year
- ☆199Updated last year
- A repository of DFIR-related Mind Maps geared towards the visual learners!☆518Updated 2 years ago
- Arya is a unique tool that produces pseudo-malicious files meant to trigger YARA rules. You can think of it like a reverse YARA.☆247Updated 2 years ago
- A repository of my own Sigma detection rules.☆158Updated 7 months ago
- A ProcessMonitor visualization application written in rust.☆178Updated last year
- Awesome list of keywords and artifacts for Threat Hunting sessions☆559Updated last month
- An easy to use PowerShell script to collect memory and disk forensics for DFIR investigations.☆280Updated 7 months ago
- MAL-CL (Malicious Command-Line)☆311Updated 2 years ago
- A YARA rules repository continuously updated for monitoring the old and new threats from articles, incidents responses ...☆139Updated last year
- An analytical challenge created to test junior analysts looking to try performing proactive and reactive cyber threat intelligence.☆196Updated 9 months ago
- The goal of this repo is to archive artifacts from all versions of various OS's and categorizing them by type. This will help with artifa…☆595Updated last month
- MISP Playbooks☆194Updated 2 months ago
- Chocolatey packages supporting the analysis environment projects FLARE-VM & Commando VM.☆175Updated this week
- ☆241Updated 11 months ago
- Blue Team detection lab created with Terraform and Ansible in Azure.☆153Updated 5 months ago
- Collection of Event ID ressources useful for Digital Forensics and Incident Response☆612Updated 10 months ago
- Threat Hunting tool about Sysmon and graphs☆331Updated last year
- A centralized and enhanced memory analysis platform☆453Updated 2 months ago