sbidy / MacroMilter
This python based milter (mail-filter) checks an incoming mail for suspicious VBA macro code in MS 20xx Office attachments (doc, xls, ppt ...).
☆39Updated 4 years ago
Alternatives and similar repositories for MacroMilter:
Users that are interested in MacroMilter are comparing it to the libraries listed below
- Fast Evidence Collector Toolkit is an incident response toolkit to collect evidences on a suspicious windows computer☆42Updated 4 years ago
- Sysmon configuration file template with default high-quality event tracing☆11Updated 7 years ago
- Traceroute improved wrapper for CSIRT and CERT operators☆38Updated 7 months ago
- ☆11Updated 6 years ago
- Breaking the security of Microsoft's RMS☆54Updated 5 years ago
- DocBleachShell is the integration of the great DocBleach, https://github.com/docbleach/DocBleach Content Disarm and Reconstruction tool i…☆21Updated 3 years ago
- CIRCL system forensic tools or a jumble of tools to support forensic☆42Updated 2 years ago
- Threat Intel and Incident Reponse☆10Updated 6 years ago
- PhishReporter Outlook Add-In in an Outlook Add-In that allows users to report phishing e-mails to a specific e-mail address for further p…☆35Updated 8 years ago
- A Postfix filter which takes a piped message and submits it to Cuckoo Sandbox☆11Updated 9 years ago
- FastIR Agent is a Windows service to execute FastIR Collector on demand☆14Updated 8 years ago
- Plugins to add funtionality to ProcDOT. http://www.procdot.com☆23Updated last year
- This repository contains all the config files and scripts used for our Open Source Endpoint monitoring project.☆34Updated 5 years ago
- ☆14Updated 6 years ago
- Carve Windows Prefetch files from arbitrary binary data☆14Updated 7 years ago
- The ContactDB project was initiated to cover the need for a tool to maintain contacts for CSIRT teams☆37Updated 3 years ago
- Artefacts from various retefe campaigns☆10Updated 6 years ago
- Virustotal Data to Timesketch☆17Updated 6 years ago
- OSSEC Decoder & Rulesets for Sysmon Events☆15Updated 9 years ago
- Crack your macros like the math pros.☆33Updated 8 years ago
- An active domain name query tool to help keep track of domain name movements...☆15Updated 4 years ago
- PowerShell based Live Response tool☆12Updated 9 years ago
- Megatron - A System for Abuse- and Incident Handling☆44Updated 8 years ago
- ProcessBouncer is a simple but effective tool for blocking malware with a process-based approach. With a little fine-tuning this allows t…☆24Updated 4 years ago
- SQL scripts for querying event logs☆21Updated 7 years ago
- IDS Utility Belt For Automating/Testing Various Things☆30Updated 4 years ago
- Auxiliary scripts for Incident Response with ELK☆11Updated 9 years ago
- This repository is a curated list of pro bono incident response entities.☆20Updated last year
- Yara syntax highlighting☆25Updated 3 years ago
- Passive Network Audit Framework☆32Updated 6 years ago