pr0xylife / Emotet
IOC Collection 2022
☆55Updated last year
Related projects: ⓘ
- ☆34Updated 9 months ago
- This repo is where I store my Threat Hunting ideas/content☆85Updated last year
- ☆95Updated 6 months ago
- CarbonBlack EDR detection rules and response actions☆70Updated last week
- Active C&C Detector☆148Updated 11 months ago
- Automating EDR Testing with reference to MITRE ATTACK via Cobalt Strike [Purple Team].☆144Updated last year
- Sigma rules to share with the community☆113Updated last month
- Default Detections for EDR☆94Updated 6 months ago
- Actively hunt for attacker infrastructure by filtering Shodan results with URLScan data.☆59Updated 2 months ago
- ☆62Updated 3 years ago
- ☆84Updated 7 months ago
- Repository for different Windows DFIR related CMDs, PowerShell CMDlets, etc, plus workshops that I did for different conferences or event…☆73Updated 3 years ago
- A Jupyter notebook to assist with the analysis of the output generated from Volatility memory extraction framework.☆94Updated last year
- ☆153Updated 9 months ago
- Repo containing various intel-based resources such as threat research, adversary emulation/simulation plan and so on☆81Updated 4 months ago
- Further investigation in to APT campaigns disclosed by private security firms and security agencies☆76Updated 2 years ago
- SubCrawl is a modular framework for discovering open directories, identifying unique content through signatures and organizing the data w…☆49Updated 3 months ago
- Linux Baseline and Forensic Triage Tool - BETA☆51Updated 2 years ago
- ☆34Updated 6 months ago
- Placeholder for my detection repo and misc detection engineering content☆43Updated 10 months ago
- PowerShell script that aim to help uncovering (eventual) persistence mechanisms deployed by a threat actor following an Active Directory …☆92Updated 10 months ago
- ☆14Updated last year
- yara detection rules for hunting with the threathunting-keywords project☆75Updated last week
- ATT&CK Powered Suit is a browser extension that puts the complete MITRE ATT&CK® knowledge base at your fingertips with text search, conte…☆69Updated this week
- C2 Active Scanner☆45Updated 3 months ago
- A Cobalt Strike Scanner that retrieves detected Team Server beacons into a JSON object☆162Updated last year
- The LOLBins CTI-Driven (Living-Off-the-Land Binaries Cyber Threat Intelligence Driven) is a project that aims to help cyber defenders und…☆108Updated 5 months ago
- The Linux DFIR Collector is a stand-alone collection tool for Gnu / Linux. Dump artifacts in json format with very few impacts on the hos…☆29Updated 2 years ago
- Slides of my public talks☆46Updated 9 months ago
- ☆59Updated 3 years ago