sankyhack

Threat-Hunting-with-WebProxy-Logs-using-Pandas---Jupyter-Notebook

ExtractLOLBin

Script is written to fetch LOLBin Details from Security and Sysmon EVTX file.

Similar-looking-domain-detection-using-python-fuzzywuzzy

Major cause of phishing and BEC incident is similar looking domain, if you detect it early, you can prevent incidents early, python fuzzywuzzy module let you do that

Vectra-AI

Scripts are written to fetch rules and certain detections from Vectra AI

Playing-with-Process-Data-of-10k-Malware-Sample

Purpose of this analysis is to understand the common behavior seen like locations from where malware runs, commonly used LOLBins, processes that communicate with internet and some hunting

CobaltStrike-TLS-Metadata-Analysis

PowerShell-Reversing

SysmonConfig-Blank