Scripts and tools accompanying HP Threat Research blog posts and reports.
☆50Apr 10, 2024Updated 2 years ago
Alternatives and similar repositories for tools
Users that are interested in tools are comparing it to the libraries listed below. We may earn a commission when you buy through links labeled 'Ad' on this page.
Sorting:
- Collection of scripts used to analyse malware or emails☆20Oct 6, 2020Updated 6 years ago
- ☆28Jul 5, 2025Updated last year
- Tool to decrypt encrypted strings in AgentTesla☆16Oct 26, 2026Updated last week
- Standardized Malware Analysis Tool☆56Mar 9, 2021Updated 5 years ago
- ☆14Aug 24, 2026Updated 2 months ago
- Wordpress hosting with auto-scaling - Free Trial Offer • AdFully Managed hosting for WordPress and WooCommerce businesses that need reliable, auto-scalable performance. Cloudways SafeUpdates now available.
- TA505 unpacker Python 2.7☆45Jun 22, 2020Updated 6 years ago
- Indicators of Compromise (IOCs) accompanying HP Threat Research blog posts and reports.☆29Apr 10, 2024Updated 2 years ago
- carcass is a Python package to generate python package scaffolding based on best practices☆17Jan 10, 2022Updated 4 years ago
- Resources I've found useful for my CTI work☆12Dec 27, 2023Updated 2 years ago
- Threat Box Assessment Tool☆19Mar 5, 2026Updated 7 months ago
- These FLARE-VM configuration files are designed to be help setup a purpose-built installation, remove unnecessary packages to help stream…☆15Apr 10, 2024Updated 2 years ago
- Merge of two major cyber adversary datasets, MITRE ATT&CK and ETDA/ThaiCERT Threat Actor Cards, enabling victim/motivation-adversary-tech…☆55Jul 31, 2022Updated 4 years ago
- Basic c2-matrix analysis enviroment using Suricata + Wazuh + Elastic stack☆13Apr 18, 2020Updated 6 years ago
- Leaked communication of Conti ransomware group from Jan 29, 2021 to Feb 27, 2022☆133Mar 2, 2022Updated 4 years ago
- Serverless GPU API endpoints on Runpod - Get Bonus Credits • AdSkip the infrastructure headaches. Auto-scaling, pay-as-you-go, no-ops approach lets you focus on innovating your application.
- IOC from articles, tweets for archives☆318Dec 12, 2023Updated 2 years ago
- Ekoparty's BlueSpace Keynote November 2021. Shoutout to @plugxor Muchas Gracias!!!☆13Jun 5, 2023Updated 3 years ago
- ☆21May 8, 2022Updated 4 years ago
- BlackBerry Threat Research & Intelligence☆100Oct 20, 2023Updated 3 years ago
- Tools for assisting the reverse engineering of Qakbot☆11Jul 21, 2021Updated 5 years ago
- Universal Malware Sample Encryption☆13Jan 5, 2024Updated 2 years ago
- Client library for the mwdb service by CERT Polska.☆42Oct 21, 2026Updated last week
- Script which is able to decrypt data sent to AzoRult 3.3 Server☆11Feb 5, 2021Updated 5 years ago
- DeployREMnux is a Python script that will deploy a cloud instance of the public REMnux distribution in the Amazon cloud (AWS).☆16Dec 20, 2019Updated 6 years ago
- Managed Database hosting by DigitalOcean • AdPostgreSQL, MySQL, MongoDB, Kafka, Valkey, and OpenSearch available. Automatically scale up storage and focus on building your apps.
- PowerShell 'Hero': scripts for DFIR and automation with a PowerShell menu example.☆37Jul 11, 2023Updated 3 years ago
- Malware sample exchange system and API intended for Anti-Virus companies and researchers.☆16Updated this week
- Presentation materials for talks I've given.☆20Oct 14, 2019Updated 7 years ago
- c2 traffic☆193Feb 6, 2023Updated 3 years ago
- Automatically create YARA rules from malicious documents.☆210May 16, 2022Updated 4 years ago
- Decloak Linux stealth rootkits hiding data with this simple memory mapped IO investigation tool.☆29Sep 29, 2025Updated last year
- Quick lookup files for SUNBURST Backdoor☆12Dec 15, 2020Updated 5 years ago
- Incident Response Methodologies (IRM), also called Incident Playbook, based on the work done by the CERT Societe General☆24Dec 16, 2021Updated 4 years ago
- VSCode extension for the YARA pattern matching language☆62Jan 10, 2024Updated 2 years ago
- Wordpress hosting with auto-scaling - Free Trial Offer • AdFully Managed hosting for WordPress and WooCommerce businesses that need reliable, auto-scalable performance. Cloudways SafeUpdates now available.
- RRR (Rapid Response Reporting) is a collection of Incident Response Report objects. They are designed to help incident responders provid…☆37Apr 6, 2022Updated 4 years ago
- Python scripts for Malware Bazaar☆162Jun 3, 2024Updated 2 years ago
- A YARA rules repository continuously updated for monitoring the old and new threats from articles, incidents responses ...☆142Nov 19, 2023Updated 2 years ago
- Sample staging & detonation utility to be used in combination with Cuckoo Sandbox.☆13Oct 26, 2026Updated last week
- Public exploits☆16May 28, 2018Updated 8 years ago
- A list of JARM hashes for different ssl implementations used by some C2/red team tools.☆144Apr 20, 2023Updated 3 years ago
- A quick bash script that I created in order to speed up the creation of usable kali boxes.☆16Oct 29, 2021Updated 5 years ago