jgru / spamtrap-system
Collection of tools to build and run a distributed spamtrap system, consisting of IMAP and SMTP collectors and a backend that extracts attachments, potentially analyzes malware and reports results to MISP or ES.
☆11Updated last year
Alternatives and similar repositories for spamtrap-system:
Users that are interested in spamtrap-system are comparing it to the libraries listed below
- JPCERT/CC public YARA rules repository☆106Updated 2 months ago
- Memory Baseliner is a script that can compare two windows memory images or perform frequency of occurrence / data stacking analysis on mu…☆52Updated last year
- YARA rule analyzer to improve rule quality and performance☆97Updated 2 months ago
- Remote access and Antivirus Logging Database☆42Updated 10 months ago
- Python based CLI for MalwareBazaar☆36Updated 4 months ago
- A collection of tips for using MISP.☆74Updated 2 months ago
- Creating a Feed of MISP Events from ThreatFox (by abuse.ch)☆19Updated 3 years ago
- The Linux DFIR Collector is a stand-alone collection tool for Gnu / Linux. Dump artifacts in json format with very few impacts on the hos…☆30Updated 2 years ago
- YARA rule metadata specification and validation utility / Spécification et validation pour les règles YARA☆100Updated this week
- ☆33Updated 4 months ago
- A repository hosting example goodware evtx logs containing sample software installation and basic user interaction☆76Updated last year
- 100 Days of YARA to be updated with rules & ideas as the year progresses☆58Updated 2 years ago
- ☆86Updated last year
- Extract BITS jobs from QMGR queue and store them as CSV records☆75Updated 2 weeks ago
- A library for fast parse & import of Windows Eventlogs into Elasticsearch.☆85Updated 8 months ago
- Repository with selected IOCs and YARA rules for threat hunting.☆35Updated 2 months ago
- Cerebrate is an open-source platform meant to act as a trusted contact information provider and interconnection orchestrator for other se…☆85Updated 2 months ago
- Stand-alone parser for User Access Logging from Server 2012 and newer systems☆72Updated last year
- Scripts and tools accompanying HP Threat Research blog posts and reports.☆50Updated 10 months ago
- Various PowerShells scripts I've made (or others have made) to automate some of the boring stuff in my everyday DFIR journey!☆45Updated 5 months ago
- Factual-rules-generator is an open source project which aims to generate YARA rules about installed software from a machine.☆76Updated 3 years ago
- Script for parsing Symantec Endpoint Protection logs, VBNs, and ccSubSDK database.☆64Updated 2 years ago
- A YARA rules repository continuously updated for monitoring the old and new threats from articles, incidents responses ...☆138Updated last year
- Simple yara rule manager☆66Updated 2 years ago
- ☆5Updated 4 months ago
- A repo for centralizing ongoing research on the new Windows 10/11 DFIR artifact, EventTranscript.db.☆39Updated 2 years ago
- The core backend server handling API requests and task management☆37Updated this week
- Jupyter Notebooks for Cyber Threat Intelligence☆36Updated last year
- ☆84Updated 2 weeks ago
- A PowerShell incident response script for quick triage☆79Updated 2 years ago