pr0xylife / QakbotLinks
☆194Updated last year
Alternatives and similar repositories for Qakbot
Users that are interested in Qakbot are comparing it to the libraries listed below
Sorting:
- ☆151Updated 2 months ago
- Collect-MemoryDump - Automated Creation of Windows Memory Snapshots for DFIR☆250Updated 2 months ago
- Welcome to the SEKOIA.IO Community repository!☆173Updated 2 weeks ago
- Sigma rules to share with the community☆123Updated 11 months ago
- An easy to use PowerShell script to collect memory and disk forensics for DFIR investigations.☆342Updated last month
- MAL-CL (Malicious Command-Line)☆323Updated 3 years ago
- ☆78Updated 3 months ago
- IOC Collection 2022☆57Updated 2 years ago
- Implementation of RITA (Real Intelligence Threat Analytics) in Jupyter Notebook with improved scoring algorithm.☆208Updated 3 years ago
- ☆131Updated last year
- The Threat Actor Profile Guide for CTI Analysts☆115Updated 2 years ago
- ☆513Updated last year
- Purpleteam scripts simulation & Detection - trigger events for SOC detections☆192Updated last year
- Rules generated from our investigations.☆203Updated 6 months ago
- A python script developed to process Windows memory images based on triage type.☆265Updated 2 years ago
- Full of public notes and Utilities☆130Updated last week
- ☆160Updated 2 years ago
- ☆96Updated 8 months ago
- Pointing cybersecurity teams to thousands of detection rules and offensive security tests aligned with common attacker techniques☆141Updated last year
- Curated Windows event log Sigma rules used in Hayabusa and Velociraptor.☆212Updated 3 weeks ago
- Some Threat Hunting queries useful for blue teamers☆131Updated 3 years ago
- Signatures and IoCs from public Volexity blog posts.☆361Updated last month
- A ProcessMonitor visualization application written in rust.☆183Updated 2 years ago
- A Jupyter notebook to assist with the analysis of the output generated from Volatility memory extraction framework.☆97Updated 2 years ago
- A Cobalt Strike Scanner that retrieves detected Team Server beacons into a JSON object☆170Updated 3 years ago
- A YARA rules repository continuously updated for monitoring the old and new threats from articles, incidents responses ...☆141Updated 2 years ago
- Active C&C Detector☆155Updated 2 years ago
- Automating EDR Testing with reference to MITRE ATTACK via Cobalt Strike [Purple Team].☆155Updated 2 years ago
- IATelligence is a Python script that will extract the IAT of a PE file and request GPT to get more information about the API and the ATT&…☆371Updated 3 years ago
- ☆212Updated last month