Alternatives and similar repositories for labs_modern_malware_c2

Users that are interested in labs_modern_malware_c2 are comparing it to the libraries listed below

• moullos / Mitigate
  Machine Interrogation To Identify Gaps & Techniques for Execution
  ☆32Updated 3 years ago
• g-les / 100DaysofYARA
  100 Days of YARA to be updated with rules & ideas as the year progresses
  ☆60Updated 2 years ago
• swimlane / PSAttck
  PSAttck is a light-weight framework for the MITRE ATT&CK Framework.
  ☆38Updated 3 years ago
• hpthreatresearch / tools
  Scripts and tools accompanying HP Threat Research blog posts and reports.
  ☆50Updated last year
• mandiant / apooxml
  Generate YARA rules for OOXML documents.
  ☆38Updated 2 years ago
• DissectMalware / MDIExtractor
  ☆15Updated 4 years ago
• myrtus0x0 / SMAT
  Standardized Malware Analysis Tool
  ☆56Updated 4 years ago
• OllieJC / tbat
  Threat Box Assessment Tool
  ☆19Updated 4 years ago
• nasbench / C2-Matrix-Indicators
  This repository aims to collect and document indicators from the different C2's listed in the C2-Matrix
  ☆74Updated 3 years ago
• slaughterjames / excelpeek
  ☆38Updated 3 years ago
• CIRCL / factual-rules-generator
  Factual-rules-generator is an open source project which aims to generate YARA rules about installed software from a machine.
  ☆75Updated 3 years ago
• tsale / BlueSploit
  BlueSploit is a DFIR framework with the main purpose being to quickly capture artifacts for later review.
  ☆32Updated 5 years ago
• fox-it / skrapa
  A zero dependency and customizable Python library for scanning Windows and Linux process memory.
  ☆66Updated last year
• W3ndige / aurora
  Malware similarity platform with modularity in mind.
  ☆79Updated 4 years ago
• ahhh / Cybersecurity-Tradecraft
  A repo to support the book
  ☆110Updated 4 years ago
• NVISOsecurity / nviso-cti
  ☆44Updated 5 months ago
• stvemillertime / RonnieColemanYARAParser
  An experimental script to perform bulk parsing of arbitrary file features with YARA and console logging.
  ☆21Updated 3 years ago
• zeflow / Sigma2SplunkAlert
  Converts Sigma detection rules to a Splunk alert configuration.
  ☆12Updated 4 years ago
• fulmetalpackets / protohacking
  This repository contains the code and PCAPS used for the SANS webinar, "Hacking Proprietary Protocols" given on February 23, 2021.
  ☆34Updated 3 years ago
• 3c7 / bazaar
  Python based CLI for MalwareBazaar
  ☆39Updated 4 months ago
• nettitude / PoshC2_IOCs
  A list of IOCs applicable to PoshC2
  ☆24Updated 5 years ago
• jwillyamz / ezEmu
  See adversary, do adversary: Simple execution of commands for defensive tuning/research (now with more ELF on the shelf)
  ☆105Updated 2 years ago
• Hestat / calamity
  A script to assist in processing forensic RAM captures for malware triage
  ☆26Updated 4 years ago
• jschicht / SetMace
  Manipulate timestamps on NTFS
  ☆53Updated 11 years ago
• ruppde / yara_rules
  Yara rules
  ☆21Updated 2 years ago
• ValcanK / HomeLab
  ☆20Updated 4 years ago
• Sh3llyR / statiStrings
  YARA Rule Strings Statistics Calculator and Malware Research Helper
  ☆14Updated 4 years ago
• sbousseaden / YaraHunts
  Random hunting ordiented yara rules
  ☆98Updated 2 years ago
• swisscom / detections
  Threat intelligence and threat detection indicators (IOC, IOA)
  ☆52Updated 5 years ago
• mandiant / goauditparser
  ☆46Updated 2 years ago