ps-interactive / labs_modern_malware_c2Links
labs_modern_malware_c2 Originally supporting Defcon workshop, will morph into Attack Defend for C2.
☆19Updated 3 years ago
Alternatives and similar repositories for labs_modern_malware_c2
Users that are interested in labs_modern_malware_c2 are comparing it to the libraries listed below
Sorting:
- Machine Interrogation To Identify Gaps & Techniques for Execution☆32Updated 3 years ago
- Factual-rules-generator is an open source project which aims to generate YARA rules about installed software from a machine.☆76Updated 3 years ago
- Standardized Malware Analysis Tool☆56Updated 4 years ago
- ☆46Updated 2 years ago
- PSAttck is a light-weight framework for the MITRE ATT&CK Framework.☆38Updated 3 years ago
- This repository aims to collect and document indicators from the different C2's listed in the C2-Matrix☆74Updated 3 years ago
- Malware similarity platform with modularity in mind.☆78Updated 4 years ago
- C# User Simulation☆33Updated 3 years ago
- ☆38Updated 3 years ago
- 100 Days of YARA to be updated with rules & ideas as the year progresses☆60Updated 2 years ago
- A repo to support the book☆110Updated 4 years ago
- Columbo is a computer forensic analysis tool used to simplify and identify specific patterns in compromised datasets.☆62Updated 4 years ago
- ☆15Updated 4 years ago
- Scripts and tools accompanying HP Threat Research blog posts and reports.☆50Updated last year
- ☆15Updated 3 years ago
- Carbon Black Response IR tool☆55Updated 4 years ago
- A list of IOCs applicable to PoshC2☆24Updated 5 years ago
- A zero dependency and customizable Python library for scanning Windows and Linux process memory.☆66Updated last year
- BlueSploit is a DFIR framework with the main purpose being to quickly capture artifacts for later review.☆32Updated 5 years ago
- Python based CLI for MalwareBazaar☆39Updated 3 months ago
- ☆44Updated 4 months ago
- YARA Rule Strings Statistics Calculator and Malware Research Helper☆14Updated 4 years ago
- Compilation of resources to help with Adversary Simulation automation harness☆100Updated 5 years ago
- Yara Based Detection Engine for web browsers☆50Updated 4 years ago
- This repository contains the code and PCAPS used for the SANS webinar, "Hacking Proprietary Protocols" given on February 23, 2021.☆34Updated 3 years ago
- Splunk Technology-AddOn for Aurora Sigma-Based EDR Agent. It helps parse and configure the necessary inputs to neatly consume Aurora EDR …☆13Updated 3 years ago
- Generate YARA rules for OOXML documents.☆38Updated 2 years ago
- Accelerating the collection, processing, analysis and outputting of digital forensic artefacts.☆32Updated last month
- IcedID Decryption Tool☆28Updated 4 years ago
- XOR Key Extractor☆51Updated last year