ptresearch / AttackDetectionLinks
Attack Detection
☆1,360Updated 3 years ago
Alternatives and similar repositories for AttackDetection
Users that are interested in AttackDetection are comparing it to the libraries listed below
Sorting:
- Indicators of compromise (IOCs) collected from public resources and categorized by Qi-AnXin.☆952Updated 2 months ago
- Guidance for mitigation web shells. #nsacyber☆982Updated 2 years ago
- Suricata IDS rules 用来检测红队渗透/恶意行为等,支持检测CobaltStrike/MSF/Empire/DNS隧道/Weevely/菜刀/冰蝎/挖矿/反弹shell/ICMP隧道等☆1,240Updated 2 years ago
- Suricata, Snort and Zeek IDS rule and pcap testing system☆501Updated last month
- AD Security Intrusion Detection System☆1,312Updated 2 years ago
- Utilities for MITRE™ ATT&CK☆1,042Updated last month
- Scirius is a web application for Suricata ruleset management and threat hunting.☆666Updated last month
- Some results of my DGA reversing efforts☆677Updated 3 weeks ago
- ☆713Updated 3 years ago
- By Kprobe technology Open Source Host-based Intrusion Detection System(HIDS), from E_Bwill.☆604Updated 4 years ago
- APTnotes data☆1,751Updated 10 months ago
- Vulmap Online Local Vulnerability Scanners Project☆971Updated 2 years ago
- Investigate malicious Windows logon by visualizing and analyzing Windows event log☆3,002Updated last week
- A Suricata based NDR distribution☆1,572Updated last month
- The tool for updating your Suricata rules.☆280Updated 3 weeks ago
- Home of the dionaea honeypot☆777Updated last year
- ☆483Updated 3 years ago
- Interesting APT Report Collection And Some Special IOCs☆2,688Updated this week
- YARA signature and IOC database for my scanners and tools☆2,764Updated 2 weeks ago
- Mirror of https://github.com/zeek/zeek☆176Updated 2 years ago
- Utilities for Sysmon☆1,551Updated last month
- Suspicious DGA from PDNS and Sandbox.☆187Updated 3 years ago
- A Linux Auditd rule set mapped to MITRE's Attack Framework☆812Updated 5 years ago
- A toolset to make a system look as if it was the victim of an APT attack☆2,668Updated last month
- 威胁情报,恶意样本分析,开源Malware代码收集☆346Updated 5 years ago
- Open Source EDR for Windows☆1,277Updated 2 years ago
- A package for capturing and analyzing network flow data and intraflow data, for network research, forensics, and security monitoring.☆1,346Updated last year
- Indicators from Unit 42 Public Reports☆725Updated 2 months ago
- Super Next generation Advanced Reactive honEypot☆470Updated last year
- ☆1,089Updated 6 years ago