malware-traffic / indicators
Indicators of Compromise (IOCs) from malware or suspicious network traffic
☆19Updated last week
Alternatives and similar repositories for indicators:
Users that are interested in indicators are comparing it to the libraries listed below
- A repository of curated lists with elements such as IoCs to use for threat hunting & detection queries.☆34Updated 9 months ago
- ☆20Updated last year
- SubCrawl is a modular framework for discovering open directories, identifying unique content through signatures and organizing the data w…☆51Updated 4 months ago
- This Repository gives the best and possible strategies against hunting the ransomware☆26Updated 2 years ago
- ☆24Updated 2 years ago
- Jupyter Notebooks for the Blue Team☆34Updated 3 months ago
- A simple tool designed to create Atomic Red Team tests with ease.☆39Updated last month
- 🧰 ESXi Testing Tookit is a command-line utility designed to help security teams test ESXi detections.☆72Updated 3 weeks ago
- Sniffing out well-known threat groups☆28Updated 8 months ago
- A public repository of MITRE ATT&ACK TTP mappings by BushidoUK for OSINT reports that lack a section breaking down the TTPs.☆23Updated last month
- ☆32Updated 5 months ago
- This project aims to bridge the gap between Microsoft Attack Surface Reduction (ASR) rules and MITRE ATT&CK by mapping ASR rules to their…☆25Updated 5 months ago
- Finding ClickFix and FakeCAPTCHA like it's 1999☆14Updated this week
- Data from Dark Web Marketplace scraping - Be careful☆39Updated 5 months ago
- CarbonBlack EDR detection rules and response actions☆71Updated 7 months ago
- This repository contains a comprehensive testing designed for evaluating the performance and resilience of Endpoint Detection and Respons…☆54Updated 6 months ago
- This project is an Ansible Role to execute Atomic Red Team tests against multiple machines by wrapping Invoke-AtomicRedTeam☆27Updated 9 months ago
- A series of python scripts to extract information from Dark Web Applications☆12Updated 3 weeks ago
- Packet Analysis on Steroids☆10Updated 2 years ago
- A small tool that helps Incident responders and SOC analysts do a quick and initial analysis/assessment of malicious files☆26Updated 2 years ago
- Repo to hold my PowerShell Scripts☆17Updated 2 years ago
- Jupyter Univere is a search engine for all infosec jupyter notebooks☆26Updated last month
- A Python script for analyzing email files to extract IP addresses, URLs, headers, and attachments, with functionalities for defanging IPs…☆21Updated 6 months ago
- Linux Baseline and Forensic Triage Tool - BETA☆55Updated 2 years ago
- This Repository consists all Public Cheatsheets created by BlackPerl DFIR Content Team☆18Updated 6 months ago
- An experimental Velociraptor implementation using cloud infrastructure☆25Updated last week
- Actively hunt for attacker infrastructure by filtering Shodan results with URLScan data.☆61Updated 9 months ago
- Elastic version of SOC prime watcher rules☆29Updated 6 months ago
- ☆74Updated 3 weeks ago
- Threat Hunt Investigation Methodology and Procedure☆15Updated 2 years ago