pan-unit42 / Wireshark-quizzesLinks
Packet captures of malicious traffic for analysis using Wireshark
☆61Updated 2 years ago
Alternatives and similar repositories for Wireshark-quizzes
Users that are interested in Wireshark-quizzes are comparing it to the libraries listed below
Sorting:
- pcaps of traffic for traffic analysis workshop☆88Updated 4 years ago
- yara detection rules for hunting with the threathunting-keywords project☆149Updated 4 months ago
- ☆53Updated 3 years ago
- Further investigation in to APT campaigns disclosed by private security firms and security agencies☆87Updated 3 years ago
- Linux Evidence Acquisition Framework☆118Updated last year
- Library of threat hunts to get any user started!☆45Updated 5 years ago
- Initial triage of Windows Event logs☆102Updated last year
- ATT&CK Powered Suit is a browser extension that puts the complete MITRE ATT&CK® knowledge base at your fingertips with text search, conte…☆79Updated 4 months ago
- Open Threat Hunting Framework☆118Updated 2 years ago
- MAD ATT&CK Defender: ATT&CK Adversary Emulation Repository☆120Updated 2 years ago
- This repository contains OpenIOC rules to aid in hunting for indicators of compromise and TTPs focused on Advanced Persistent Threat grou…☆25Updated 2 years ago
- Open IOC sharing platform☆61Updated 11 months ago
- Cyber Threat Intelligence Data, Indicators, and Analysis☆97Updated 2 months ago
- BlackBerry Threat Research & Intelligence☆99Updated last year
- A Jupyter notebook to assist with the analysis of the output generated from Volatility memory extraction framework.☆97Updated 2 years ago
- ☆67Updated 3 weeks ago
- ☆75Updated last week
- This repository is for Indicators of Compromise (IOCs) from Zscaler ThreatLabz public reports☆73Updated 2 months ago
- Forensic Artifact Collection Tool Matrix☆90Updated 11 months ago
- Intel Retrieval Augmented Generation (RAG) Utilities☆90Updated last year
- Slides of my public talks☆56Updated last year
- Implementation of RITA (Real Intelligence Threat Analytics) in Jupyter Notebook with improved scoring algorithm.☆205Updated 3 years ago
- This CALDERA Plugin converts Adversary Emulation Plans from the Center for Threat Informed Defense☆32Updated last week
- CyberChef - Detection Engineering, TI, DFIR, Malware Analysis Edition☆66Updated 3 years ago
- ☆96Updated 5 months ago
- Fast IOC and YARA Scanner☆83Updated 5 years ago
- ☆52Updated last month
- A collection of tips for using MISP.☆74Updated 9 months ago
- ☆33Updated last week
- Passive OS detection based on SYN packets without Transmitting any Data☆47Updated 2 years ago