likekabin / CyberMonitor-APT_CyberCriminal_Campagin_CollectionsLinks
☆33Updated 7 years ago
Alternatives and similar repositories for CyberMonitor-APT_CyberCriminal_Campagin_Collections
Users that are interested in CyberMonitor-APT_CyberCriminal_Campagin_Collections are comparing it to the libraries listed below
Sorting:
- Pull some Malware samples here for other security researchers/malware analyst's to analyze and play with.☆173Updated last year
- An easy ATT&CK-based Sysmon hunting tool, showing in Blackhat USA 2019 Arsenal☆202Updated 3 years ago
- Explore Indicators of Compromise Automatically☆96Updated 5 years ago
- Code and yara rules to detect and analyze Cobalt Strike☆271Updated 4 years ago
- A Solution For Cross-Platform Obfuscated Commands Detection presented on CIS2019 China. 动静态Bash/CMD/PowerShell命令混淆检测框架 - CIS 2019大会☆165Updated 6 years ago
- Setup scripts for my Malware Analysis VMs☆256Updated 3 years ago
- The oledump-contrib repository contains plugins and enhancements for the oledump tool published by Didier Stevens.☆55Updated 9 years ago
- This repository will hold PCAP IOC data related with known malware samples (owner: Bryant Smith)☆107Updated 4 years ago
- PA Toolkit is a collection of traffic analysis plugins focused on security☆433Updated 5 years ago
- ☆55Updated last year
- Download pcap files from http://www.malware-traffic-analysis.net/☆79Updated 7 years ago
- Repository of yara rules☆48Updated 10 years ago
- HTran is a connection bouncer, a kind of proxy server. A “listener” program is hacked stealthily onto an unsuspecting host anywhere on t…☆259Updated 4 years ago
- Toolset for research malware and Cobalt Strike beacons☆211Updated 6 months ago
- A tool for de-obfuscating PowerShell scripts☆70Updated 6 years ago
- Elemental - An ATT&CK Threat Library☆318Updated 2 years ago
- Indicators of compromise (IOCs) collected from public resources and categorized by Qi-AnXin.☆950Updated 3 weeks ago
- PCAP Samples for Different Post Exploitation Techniques☆365Updated 4 years ago
- Beta versions of my software☆261Updated 3 months ago
- Remove individual lines from Windows XML Event Log (EVTX) files☆271Updated 4 years ago
- Proof of Concept exploit for CVE-2017-8570☆185Updated 7 years ago
- Suricata rules for the new critical vulnerabilities☆83Updated 4 years ago
- Tool based on CobaltStrikeParser from SentinelOne which can be used to spam a CobaltStrike server with fake beacons☆372Updated 4 years ago
- Suspicious DGA from PDNS and Sandbox.☆186Updated 3 years ago
- Historical list of {Cobalt Strike,NanoHTTPD} servers☆121Updated 6 years ago
- A collection of scripts for dealing with Cobalt Strike beacons in Python☆168Updated 4 years ago
- ☆30Updated 2 years ago
- Simple web shell scanner written in Golang.☆90Updated 6 years ago
- Malware Sinkhole List in various formats☆102Updated 3 years ago
- APT34/OILRIG leak☆233Updated 6 years ago