mandiant / sunburst_countermeasures
☆560Updated last year
Alternatives and similar repositories for sunburst_countermeasures
Users that are interested in sunburst_countermeasures are comparing it to the libraries listed below
Sorting:
- SunBurst DGA Decode Script☆207Updated 4 years ago
- Indicators from Unit 42 Public Reports☆711Updated 3 weeks ago
- Sophos-originated indicators-of-compromise from published reports☆585Updated last week
- Actionable analytics designed to combat threats☆984Updated 2 years ago
- Scripts and a (future) library to improve users' interactions with the ATT&CK content☆585Updated last year
- A collection of red team and adversary emulation resources developed and released by MITRE.☆506Updated 4 years ago
- Tools for hunting for threats.☆582Updated 2 weeks ago
- A knowledge base of actionable Incident Response techniques☆635Updated 2 years ago
- Tools to rapidly deploy a threat hunting capability on Azure Sentinel that leverages Sysmon and MITRE ATT&CK☆1,067Updated 5 months ago
- A Splunk app mapped to MITRE ATT&CK to guide your threat hunts☆1,156Updated last year
- Repository of YARA rules made by Trellix ATR Team☆596Updated last month
- Open Source Security Events Metadata (OSSEM)☆1,266Updated 2 years ago
- Threat Pursuit Virtual Machine (VM): A fully customizable, open-sourced Windows-based distribution focused on threat intelligence analysi…☆1,266Updated last year
- Cyber Analytics Repository☆937Updated this week
- Online hash checker for Virustotal and other services☆825Updated last month
- An Active Defense and EDR software to empower Blue Teams☆1,273Updated last year
- Re-play Security Events☆1,641Updated last year
- A Python package to interact with the Mitre ATT&CK Framework☆477Updated last year
- Analysis of malware and Cyber Threat Intel of APT and cybercriminals groups☆705Updated 2 years ago
- Python Script to access ATT&CK content available in STIX via a public TAXII server☆565Updated 4 months ago
- IOC from articles, tweets for archives☆313Updated last year
- Documentation of TheHive☆397Updated last year
- Sparrow.ps1 was created by CISA's Cloud Forensics team to help detect possible compromised accounts and applications in the Azure/m365 en…☆1,420Updated 2 years ago
- Windows Events Attack Samples☆2,356Updated 2 years ago
- A set of Zeek scripts to detect ATT&CK techniques.☆589Updated 10 months ago
- ☆100Updated 4 years ago
- ☆2,661Updated last year
- Python library using the MISP Rest API☆462Updated this week
- Beacon Kibana Executable Report. Aggregates Sysmon Network Events With Elasticsearch and Kibana☆296Updated 7 months ago
- CyLR - Live Response Collection Tool☆677Updated 2 years ago