serrastusbear / NewDomainSearch
Script to pull newly-registered domains and check for similarity against a provided word list.
☆13Updated 4 years ago
Related projects ⓘ
Alternatives and complementary repositories for NewDomainSearch
- An extendable tool to extract and aggregate IoCs from threat feeds☆32Updated 9 months ago
- A collection of threat intelligence data such as IOC, Yara and Snort/Suricata Rules etc.☆10Updated 5 years ago
- ☆24Updated 2 years ago
- Presentation materials for talks I've given.☆20Updated 5 years ago
- ☆22Updated 3 years ago
- Indicators of compromise relating to our report on APT10's targeting of global MSPs☆10Updated 7 years ago
- ☆12Updated 3 years ago
- Scripts to help hunt for possible golden/silver TGT tickets☆16Updated 7 years ago
- Repository for scripts and tips for "Yara Scan Service"☆20Updated last year
- Home to the ActorTrackr source code☆27Updated 7 years ago
- Plugins for the Viper Framework☆14Updated 5 years ago
- Threat hunting with EQL and Bro. This repo contains modifications to EQL and EQLLib to use BRO logs.☆8Updated 5 years ago
- volatility-runner is a command line application designed to speed up memory forensics using the volatility framework, primarily for insta…☆11Updated 5 years ago
- Some rules, scripts of some use to us☆9Updated 3 weeks ago
- Speaking materials from conferences I've given☆9Updated 2 years ago
- Links to malware-related YARA rules☆14Updated 2 years ago
- HoneyDB Python Module☆13Updated 9 months ago
- A list of IOCs applicable to PoshC2☆24Updated 4 years ago
- A Maltego transform for VirusTotal Submitter Information☆31Updated 5 years ago
- A PowerShell script to prevent Sysmon from writing its events☆14Updated 4 years ago
- Conceptual Methods for Finding Commonalities in Macho Files☆12Updated 8 months ago
- Scans through registry hives outputting entropy values for key/values, dumps binary contents to files...we are looking for those "fileles…☆11Updated 5 years ago
- ☆12Updated 6 years ago
- Yara rules☆20Updated last year
- Notebooks created to attack and secure Active Directory environments☆27Updated 5 years ago
- Steezy - Ghetto Yara Generation☆15Updated last year
- The project is called GreatSCT (Great Scott). GreatSCT is an open source project to generate application white list bypasses. This tool i…☆28Updated 6 years ago
- ☆23Updated 4 years ago
- Historical Observations of Actionable Reputation Data☆13Updated 6 years ago
- Crowdstrike Falcon Host script for iterating through instances to get alert and other relevant data☆13Updated 5 years ago