An extensible, deterministic static‑analysis engine that extracts high‑signal IOCs from PE binaries and text, built for SOC automation and modern threat‑analysis pipelines.
☆28Sep 9, 2026Updated last month
Alternatives and similar repositories for iocx
Users that are interested in iocx are comparing it to the libraries listed below. We may earn a commission when you buy through links labeled 'Ad' on this page.
Sorting:
- ☆12Aug 7, 2025Updated last year
- Hundred Days of Yara Challenge☆12Jun 21, 2022Updated 4 years ago
- Nim-based encryption tool for obfuscating shellcode and payloads for evading Windows Defender.☆28Jul 14, 2026Updated 3 months ago
- .NET process monitor that hooks CLR at the native layer, dumps reflective assemblies from memory, and checks AMSI/ETW integrity vs on dis…☆41Oct 11, 2026Updated last week
- A collection of Sigma detection rules for SIEM platforms to identify malicious or suspicious activity and potential threats. Modify the r…☆19Oct 13, 2026Updated last week
- GPU virtual machines on DigitalOcean Gradient AI • AdGet to production fast with high-performance AMD and NVIDIA GPUs you can spin up in seconds. The definition of operational simplicity.
- Windows EVTX log analysis for DFIR — fast parsing, ATT&CK mapping, IOC extraction, and Sentinel anomaly detection. Normal + Juggernaut Mo…☆59Sep 6, 2026Updated last month
- AI-powered malware traffic analysis and network forensics via the Model Context Protocol☆19May 27, 2026Updated 4 months ago
- CLI tool that explains CVEs in plain English and scans repos for impact. Powered by Claude.☆20May 12, 2026Updated 5 months ago
- AI 恶意软件自动化分析平台☆29Aug 29, 2026Updated last month
- Everything related to YARA☆16Apr 18, 2026Updated 6 months ago
- AutoMSF is a Python script designed for fast generation and deployment of multiple types of Meterpreter reverse_https payloads. Created t…☆19Mar 20, 2025Updated last year
- This repository contains an IDA processor for loading and disassembling compiled yara rules.☆53Dec 31, 2024Updated last year
- Elastic Security Labs' malware analysis and reverse engineering library☆81Sep 14, 2026Updated last month
- Cyber Threat Defense World Modeling☆26May 13, 2026Updated 5 months ago
- Wordpress hosting with auto-scaling - Free Trial Offer • AdFully Managed hosting for WordPress and WooCommerce businesses that need reliable, auto-scalable performance. Cloudways SafeUpdates now available.
- Read-only Active Directory & Microsoft Entra ID hygiene auditor in pure PowerShell. Collect once, analyze offline: deterministic findings…☆21Updated this week
- Bypassing EDR's with stealthy c++ telegram Bot and Telegram itself as C2 interface !☆45Mar 24, 2026Updated 6 months ago
- Windows forensics Engine☆114Oct 10, 2026Updated last week
- Cyber threat intelligence tool suite.☆41Apr 3, 2025Updated last year
- Malware, tooling, logs, IOCs and intelligence☆57Aug 31, 2026Updated last month
- Examine Chrome extensions for security issues☆101Nov 16, 2025Updated 11 months ago
- Prevention-focused living-off-the-land testing framework mapped to MITRE ATT&CK.☆29Jul 24, 2026Updated 2 months ago
- DetectPack Forge turns plain-English behaviors or sample logs into production-ready detection packs — Sigma, KQL (Sentinel), SPL (Splunk)…☆24Mar 19, 2026Updated 7 months ago
- Muteces (mutexes/mutants) used by various malware families☆25Nov 11, 2024Updated last year
- Managed hosting for WordPress and PHP on Cloudways • AdManaged hosting for WordPress, Magento, Laravel, or PHP apps, on multiple cloud providers. Deploy in minutes on Cloudways by DigitalOcean.
- This tool extracts hidden metadata from online documents (PDF, Word, Excel, Images) to reveal information about the document's origin, au…☆28Sep 4, 2025Updated last year
- EAA is a curated catalog of techniques and real-world cases involving abuse of local AI agents through their runtime, configuration, stat…☆94Oct 3, 2026Updated 2 weeks ago
- Automagically decode DNS Exfiltration queries to convert Blind RCE into proper RCE via Burp Collaborator☆21Jan 7, 2026Updated 9 months ago
- A resource for leveraging Windows and Sysmon event codes in threat hunting and incident response.☆27Sep 29, 2024Updated 2 years ago
- Links to malware-related YARA rules☆15Sep 29, 2022Updated 4 years ago
- FLARE floss applied to all unpacked+dumped samples in Malpedia, pre-processed for further use.☆84Jan 6, 2026Updated 9 months ago
- The SecurityTube Linux Assembly Expert (SLAE) is an online course and certification which focuses on teaching the basics of 32-bit assemb…☆22Mar 31, 2019Updated 7 years ago
- SigLens is a Windows binary analysis tool designed to pinpoint the exact regions responsible for antivirus detections. It narrows detecti…☆42Oct 1, 2026Updated 3 weeks ago
- Fast HTTP access control testing tool designed to discover 401 and 403 bypass vulnerabilities☆20Apr 29, 2026Updated 5 months ago
- Simple, predictable pricing with DigitalOcean hosting • AdAlways know what you'll pay with monthly caps and flat pricing. Enterprise-grade infrastructure trusted by 600k+ customers.
- yara detection rules for hunting with the threathunting-keywords project☆171May 11, 2025Updated last year
- ☆51Oct 14, 2025Updated last year
- Forensic tool for extracting and analyzing Google DriveFS cached files and metadata.☆23May 9, 2025Updated last year
- Linux Kernel LPE☆16Sep 28, 2026Updated 3 weeks ago
- Pentesting, Red Teaming. Reports☆11May 25, 2023Updated 3 years ago
- A curated collection of DFIR skills and workflows for InfoSec practitioners.☆325May 14, 2026Updated 5 months ago
- An example of a mis-configured Rails application release under MIT license.☆21Jan 19, 2023Updated 3 years ago