stairwell-inc / cobalt-strike-stager-parser
☆34Updated last year
Related projects ⓘ
Alternatives and complementary repositories for cobalt-strike-stager-parser
- ☆31Updated 2 years ago
- Modular malware analysis artifact collection and correlation framework☆52Updated 6 months ago
- Generate YARA rules for OOXML documents.☆37Updated last year
- A collection of Tools and Rules for decoding Brute Ratel C4 badgers☆62Updated 2 years ago
- ☆15Updated 2 years ago
- Yara rules☆20Updated last year
- A proof-of-concept re-assembler for reverse VNC traffic.☆25Updated last year
- Generates YARA rules to detect malware using API hashing☆17Updated 3 years ago
- Specialized tool to dump Position Independent Code.☆21Updated 4 years ago
- Scripts, Yara rules and other files developed during malware investigations☆24Updated 2 years ago
- A list of IOCs applicable to PoshC2☆24Updated 4 years ago
- 100 Days of YARA to be updated with rules & ideas as the year progresses☆56Updated last year
- Collection of generic YARA rules☆14Updated 5 months ago
- Links to malware-related YARA rules☆14Updated 2 years ago
- ☆23Updated 4 years ago
- Hundred Days of Yara Challenge☆12Updated 2 years ago
- Placeholder for my detection repo and misc detection engineering content☆43Updated last year
- Simple PowerShell script to enable process scanning with Yara.☆90Updated 2 years ago
- ☆21Updated last month
- Unpacking and decryption tools for the Emotet malware☆46Updated 2 years ago
- ☆14Updated last year
- A repository containing the research output from my GCFE Gold Paper which compared Windows 10 and Windows 11.☆25Updated 2 years ago
- This is a repo for fetching Applocker event log by parsing the win-event log☆30Updated 2 years ago
- ETW-Almulahaza is a consumer python-based tool that help you monitor ETW events of the operating system☆12Updated 2 years ago
- Tweettioc Splunk App☆20Updated 4 years ago
- ☆43Updated last year
- Assist analyst and threat hunters to understand Windows authentication logs and to analyze brutforce scenarios.☆18Updated last year
- Repository for LNK stuff☆27Updated 2 years ago
- An experimental script to perform bulk parsing of arbitrary file features with YARA and console logging.☆21Updated 2 years ago
- aggregated repo for all conferences and talks I am giving☆17Updated 3 years ago