Truesec

CSIRT

Kaseya-CheckandMitigate

This repository contains a script created by Truesec CSIRT team which can be used to identify signs of compromise and to some extent, mitigate further risk to a Kaseya monitored endpoint.

TSDecryptors

Decryptors of the Chaos family malware

sunburst-decoder

Script to decode the DGA algorithm used in the SUNBURST backdoor

TSPersistentService

Proof-of-concept script for live analysis of persistent Windows Services [MITRE T1543.003] as presented in the 2021 SEC-T Conference.

misp-metricsexporter

This project provides a way to export metrics from MISP in Prometheus format