netskopeoss / NetskopeThreatLabsIOCs
☆90Updated 3 weeks ago
Related projects ⓘ
Alternatives and complementary repositories for NetskopeThreatLabsIOCs
- JPCERT/CC public YARA rules repository☆101Updated 4 months ago
- A YARA rules repository continuously updated for monitoring the old and new threats from articles, incidents responses ...☆138Updated 11 months ago
- YARA rule analyzer to improve rule quality and performance☆93Updated 11 months ago
- Further investigation in to APT campaigns disclosed by private security firms and security agencies☆80Updated 2 years ago
- ☆61Updated last month
- A guide on how to write fast and memory friendly YARA rules☆124Updated last year
- ☆130Updated 9 months ago
- YARA rule metadata specification and validation utility / Spécification et validation pour les règles YARA☆98Updated 2 months ago
- Elastic Security Labs releases☆51Updated last week
- ATT&CK Powered Suit is a browser extension that puts the complete MITRE ATT&CK® knowledge base at your fingertips with text search, conte…☆72Updated this week
- Collection of rules created using YARA-Signator over Malpedia☆112Updated 11 months ago
- Open Dataset of Cobalt Strike Beacon metadata (2018-2022)☆122Updated 2 years ago
- Implementation of RITA (Real Intelligence Threat Analytics) in Jupyter Notebook with improved scoring algorithm.☆194Updated 2 years ago
- Rules shared by the community from 100 Days of YARA 2024☆77Updated 6 months ago
- Cobalt Strike Beacon configuration extractor and parser.☆145Updated 3 years ago
- 100 Days of YARA to be updated with rules & ideas as the year progresses☆56Updated last year
- A specification and style guide for YARA rules☆37Updated 8 months ago
- The Linux DFIR Collector is a stand-alone collection tool for Gnu / Linux. Dump artifacts in json format with very few impacts on the hos…☆29Updated 2 years ago
- ☆84Updated 8 months ago
- Rules Shared by the Community from 100 Days of YARA 2023☆77Updated last year
- Research indicators and detection rules☆66Updated last year
- A Cobalt Strike Scanner that retrieves detected Team Server beacons into a JSON object☆164Updated 2 years ago
- This repository contains analysis scripts, YARA rules, and additional IoCs related to our Telekom Security blog posts.☆110Updated 10 months ago
- Sigma rules to share with the community☆115Updated last month
- A python script developed to process Windows memory images based on triage type.☆258Updated 11 months ago
- ☆96Updated last week
- Digital Forensics Artifacts Knowledge Base☆75Updated 5 months ago
- A Jupyter notebook to assist with the analysis of the output generated from Volatility memory extraction framework.☆94Updated last year
- BlackBerry Threat Research & Intelligence☆93Updated last year
- The Windows Malware Analysis Reversing Core Tools☆89Updated 3 years ago