The report of a supervised classifier to detect malware in TLS traffic
☆21Oct 21, 2019Updated 6 years ago
Alternatives and similar repositories for tls-malware-detection
Users that are interested in tls-malware-detection are comparing it to the libraries listed below. We may earn a commission when you buy through links labeled 'Ad' on this page.
Sorting:
- This repository is used to store recording about papers and presentations readed.☆18Aug 8, 2024Updated 2 years ago
- Code of "MalDetect: A Structure of Encrypted Malware Traffic Detection"☆16Sep 9, 2019Updated 6 years ago
- Implementation realized for my master thesis on "Botnet detection in encrypted traffic - a machine learning approach"☆18Jan 11, 2019Updated 7 years ago
- Using machine learning to detect malware in encrypted TLS traffic metadata☆17May 5, 2021Updated 5 years ago
- shared samples from #dailyphish and/or #apt tweets☆42Sep 3, 2025Updated 11 months ago
- Managed Kubernetes at scale on DigitalOcean • AdDigitalOcean Kubernetes includes the control plane, bandwidth allowance, container registry, automatic updates, and more for free.
- The project is to detect malware traffic in TLS flows using ML☆36Feb 24, 2020Updated 6 years ago
- Code for Benchmarking two ML Approaches performing Authorship Attribution☆43Apr 5, 2022Updated 4 years ago
- Method of finding interesting domains using keywords + JARMs☆13Jan 30, 2023Updated 3 years ago
- Python library to get the Alexa rank of the domain of any URL☆10Jan 28, 2013Updated 13 years ago
- High fidelity JA3 & JA3S combinations for known botnets and alike☆12Feb 14, 2019Updated 7 years ago
- Scripts for CCS 2015 "Seeing through Network Protocol Obfuscation"☆24Mar 16, 2016Updated 10 years ago
- Practice Go programming and implement CobaltStrike's Beacon in Go☆14Mar 19, 2020Updated 6 years ago
- A Zeek script to generate features based on timing, volume and metadata for traffic classification.☆62Nov 8, 2020Updated 5 years ago
- Top DNS Measurement for Bro☆10Aug 22, 2020Updated 5 years ago
- Serverless GPU API endpoints on Runpod - Get Bonus Credits • AdSkip the infrastructure headaches. Auto-scaling, pay-as-you-go, no-ops approach lets you focus on innovating your application.
- This repository contains tools used by 401trg.☆21Apr 14, 2021Updated 5 years ago
- ghidra scripts☆15Feb 5, 2021Updated 5 years ago
- Matt's DFIR blog☆14Jun 23, 2026Updated last month
- EBSNN: Extended Byte Segment Neural Network for Network Traffic Classification☆18Jul 28, 2021Updated 5 years ago
- ☆15Nov 29, 2020Updated 5 years ago
- PAC HTTPS leak demo from DEF CON 24 'Toxic Proxies' talk☆30Oct 4, 2016Updated 9 years ago
- Repository of Volatility3 plugins☆23Mar 22, 2023Updated 3 years ago
- ☆101Nov 26, 2020Updated 5 years ago
- emotet configs pulled from https://cape.contextis.com/☆15Apr 27, 2022Updated 4 years ago
- Deploy on Railway without the complexity - Free Credits Offer • AdConnect your repo and Railway handles the rest with instant previews. Quickly provision container image services, databases, and storage volumes.
- Python tool for converting from joy format to JA3 format SSL/TLS hashes☆11Jun 3, 2020Updated 6 years ago
- Interpreting and Improving Deep Learning-based Anomaly Detection in Security Applications (CCS'21)☆74Dec 16, 2021Updated 4 years ago
- Coburg Intrusion Detection Data Sets☆51Oct 25, 2017Updated 8 years ago
- 通过pcap文件生成描述网络传输报文的文本文件☆16Dec 22, 2017Updated 8 years ago
- A set of tools and procedures for automating NSM and NIDS deployments in AWS☆15Oct 16, 2020Updated 5 years ago
- nPrint provides a generalizable data representation for network packets that works directly with machine learning techniques☆124Dec 4, 2025Updated 8 months ago
- Pull some Malware samples here for other security researchers/malware analyst's to analyze and play with.☆172May 29, 2024Updated 2 years ago
- peda like debugger script for windbg/windbgx and mingw-gdb☆11Dec 31, 2021Updated 4 years ago
- Bro integration with osquery☆15Mar 24, 2023Updated 3 years ago
- Deploy on Railway without the complexity - Free Credits Offer • AdConnect your repo and Railway handles the rest with instant previews. Quickly provision container image services, databases, and storage volumes.
- 恶意流量分析程序☆197Dec 11, 2017Updated 8 years ago
- Scripts & snippets☆14Apr 28, 2026Updated 3 months ago
- Volatility 3 Plugins☆21Oct 3, 2022Updated 3 years ago
- A tool to assist with network-based hunting for GRU's Drovorub malware c2☆25Aug 28, 2020Updated 5 years ago
- The Decompressoin tool for Vxworks MINIFS☆14May 18, 2021Updated 5 years ago
- Logstash Editor for Visual Studio Code☆17Mar 26, 2026Updated 4 months ago
- Shellcode Spider of Exploit-DB☆11Oct 17, 2017Updated 8 years ago