An extensible, deterministic static‑analysis engine that extracts high‑signal IOCs from PE binaries and text, built for SOC automation and modern threat‑analysis pipelines.
☆30Sep 9, 2026Updated 2 months ago
Alternatives and similar repositories for iocx
Users that are interested in iocx are comparing it to the libraries listed below. We may earn a commission when you buy through links labeled 'Ad' on this page.
Sorting:
- Automated Detection-as-Code (DaC) CI/CD pipeline for validating and programmatically deploying SIEM detection rules via GitHub Actions an…☆11Aug 31, 2026Updated 2 months ago
- ☆12Aug 7, 2025Updated last year
- Interactive documentation and visual reference for binary formats and system memory layouts.☆15Jul 13, 2026Updated 3 months ago
- Windows EVTX log analysis for DFIR — fast parsing, ATT&CK mapping, IOC extraction, and Sentinel anomaly detection. Normal + Juggernaut Mo…☆62Updated this week
- .NET process monitor that hooks CLR at the native layer, dumps reflective assemblies from memory, and checks AMSI/ETW integrity vs on dis…☆41Oct 11, 2026Updated last month
- 1-Click AI Models by DigitalOcean Gradient • AdDeploy popular AI models on DigitalOcean Gradient GPU virtual machines with just a single click. Zero configuration with optimized deployments.
- Prevention-focused living-off-the-land testing framework mapped to MITRE ATT&CK.☆31Jul 24, 2026Updated 3 months ago
- Browser extension blocking scam and phishing pages https://chromewebstore.google.com/detail/nehboro/ljgklnaofelbcnegjniagpmjknkmaiom☆17Apr 22, 2026Updated 6 months ago
- Nim-based encryption tool for obfuscating shellcode and payloads for evading Windows Defender.☆30Jul 14, 2026Updated 3 months ago
- AI-powered malware traffic analysis and network forensics via the Model Context Protocol☆19May 27, 2026Updated 5 months ago
- CLI tool that explains CVEs in plain English and scans repos for impact. Powered by Claude.☆20May 12, 2026Updated 6 months ago
- 32 production-quality KQL detection rules for Microsoft Sentinel, mapped to MITRE ATT&CK for Cloud, credential access, lateral movement, …☆15Aug 1, 2026Updated 3 months ago
- Everything related to YARA☆16Apr 18, 2026Updated 6 months ago
- AutoMSF is a Python script designed for fast generation and deployment of multiple types of Meterpreter reverse_https payloads. Created t…☆19Mar 20, 2025Updated last year
- A Public Package Scanner for The Community☆13Jan 14, 2026Updated 9 months ago
- Deploy on Railway without the complexity - Free Credits Offer • AdConnect your repo and Railway handles the rest with instant previews. Quickly provision container image services, databases, and storage volumes.
- FLARE floss applied to all unpacked+dumped samples in Malpedia, pre-processed for further use.☆87Jan 6, 2026Updated 10 months ago
- This repository contains an IDA processor for loading and disassembling compiled yara rules.☆53Dec 31, 2024Updated last year
- Linux Persistence Detection, Hunting and Artifact Collection script☆30Oct 31, 2026Updated last week
- Cyber Threat Defense World Modeling☆26May 13, 2026Updated 5 months ago
- PETriage: A symbol-unified PE file reader for triage, built for multi-platform and multi-interface use.☆13Aug 4, 2026Updated 3 months ago
- Automated YARA rule generation from the Cert Central compromised certificate database.☆17Updated this week
- Backdoor Visual Studio project files with custom shellcode, which executes whenever the project is opened or built.☆66Jul 17, 2026Updated 3 months ago
- Elastic Security Labs' malware analysis and reverse engineering library☆81Sep 14, 2026Updated last month
- Malware, tooling, logs, IOCs and intelligence☆57Aug 31, 2026Updated 2 months ago
- Managed hosting for WordPress and PHP on Cloudways • AdManaged hosting for WordPress, Magento, Laravel, or PHP apps, on multiple cloud providers. Deploy in minutes on Cloudways by DigitalOcean.
- Windows forensics Engine☆118Nov 3, 2026Updated last week
- Bounded-state streaming scanner for web, source, and file content pipelines☆10Jun 19, 2026Updated 4 months ago
- Cyber threat intelligence tool suite.☆41Apr 3, 2025Updated last year
- Interactive PowerShell framework for testing WMI, COM, LOLBAS, and persistence techniques☆132Dec 28, 2025Updated 10 months ago
- Examine Chrome extensions for security issues☆102Nov 16, 2025Updated 11 months ago
- Notes from my "Implementing a Kick-Butt Training Program: Blue Team GO!" talk☆15Mar 4, 2019Updated 7 years ago
- DetectPack Forge turns plain-English behaviors or sample logs into production-ready detection packs — Sigma, KQL (Sentinel), SPL (Splunk)…☆24Mar 19, 2026Updated 7 months ago
- Collection of my own detection rules☆20Oct 21, 2026Updated 3 weeks ago
- This tool extracts hidden metadata from online documents (PDF, Word, Excel, Images) to reveal information about the document's origin, au…☆28Sep 4, 2025Updated last year
- Bare Metal GPUs on DigitalOcean Gradient AI • AdPurpose-built for serious AI teams training foundational models, running large-scale inference, and pushing the boundaries of what's possible.
- A resource for leveraging Windows and Sysmon event codes in threat hunting and incident response.☆27Sep 29, 2024Updated 2 years ago
- ☆11Mar 8, 2026Updated 8 months ago
- Muteces (mutexes/mutants) used by various malware families☆25Nov 11, 2024Updated 2 years ago
- Links to malware-related YARA rules☆15Sep 29, 2022Updated 4 years ago
- Fast HTTP access control testing tool designed to discover 401 and 403 bypass vulnerabilities☆21Apr 29, 2026Updated 6 months ago
- A VS Code plugin to execute arbitrary JavaScript code at runtime over a local HTTP endpoint.☆34Feb 10, 2026Updated 9 months ago
- Security content lifecycle management for Microsoft Sentinel and Microsoft Defender XDR.☆17Updated this week
Are these results useful?