qeeqbox / APT-Malware-Reports-Set-1Links
Some extracted Features\IoCs\Artifacts\Patterns from APT Malware
☆14Updated 5 years ago
Alternatives and similar repositories for APT-Malware-Reports-Set-1
Users that are interested in APT-Malware-Reports-Set-1 are comparing it to the libraries listed below
Sorting:
- Home to the ActorTrackr source code☆30Updated 8 years ago
- Collection of YARA signatures from individual research☆45Updated 2 years ago
- A map displaying threat actors from the misp-galaxy☆33Updated 2 years ago
- A collection of Indicators of Compromise (IoCs), most aligning with samples derived from the signatures in the YARA-Signatures repo☆30Updated 5 years ago
- Knowledge base workflow management for YARA rules and C2 artifacts (IP, DNS, SSL) (ALPHA STATE AT THE MOMENT)☆103Updated 5 months ago
- Tools to interact with APTnotes reporting/index.☆107Updated 5 years ago
- The Fastest way to consume Threat Intel☆26Updated 3 years ago
- Repository of all the sites related to infosec IP/Domain/Hash/SSL/etc OSINT and eventually will include more.☆69Updated last month
- An extendable tool to extract and aggregate IoCs from threat feeds☆34Updated last year
- A collection of my public YARA signatures for various malware families☆30Updated last year
- Website crawler with YARA detection☆90Updated 2 years ago
- ☆18Updated 7 years ago
- Indicators of compromise relating to our report on APT10's targeting of global MSPs☆10Updated 8 years ago
- Utility for parsing Bro log files into CSV or JSON format☆42Updated 2 years ago
- This script scans the files extracted by Zeek with YARA rules located on the rules folder on a Linux based Zeek sensor, if there is a mat…☆62Updated last year
- This tool maps a file's behavior on MITRE ATT&CK matrix.☆59Updated 5 years ago
- Converting data from services like Censys and Shodan to a common data model☆50Updated last week
- Fang and defang indicators of compromise. You can test this project in a GUI here: http://ioc-fanger.hightower.space .☆67Updated 2 years ago
- A tool to assess data quality, built on top of the awesome OSSEM.☆79Updated 3 years ago
- MISP website (hugo-based)☆25Updated this week
- ☆35Updated 4 years ago
- Integration between MISP platform and McAfee MVISION EDR☆14Updated 3 years ago
- Collection of scripts used to analyse malware or emails☆20Updated 5 years ago
- Mapping NSM rules to MITRE ATT&CK☆73Updated 5 years ago
- Repository of yara rules☆60Updated 3 years ago
- Easy way to create a MISP event related to a Phishing page☆17Updated 2 years ago
- ☆25Updated 3 years ago
- Remote Desktop Client Fingerprint script for Zeek. Based off of https://github.com/0x4D31/fatt☆40Updated 2 years ago
- Definition, description and relationship types of MISP objects☆104Updated this week
- Searches for Insider Threat Hunting☆30Updated 6 years ago