SophosLabs

IoCs

Sophos-originated indicators-of-compromise from published reports

CVE-2018-18500

PoC for CVE-2018-18500 - Firefox Use-After-Free

CVE-2019-0888

PoC for CVE-2019-0888 - Use-After-Free in Windows ActiveX Data Objects (ADO)

WebAssembly

Research on WebAssembly

covid-iocs

Malware, spam, and phishing indicators of compromise that involve the use of COVID-19 or coronavirus in some way

metasploit_gather_exchange

Metasploit Post-Exploitation Gather module for Exchange Server

emotet_unflatten_poc

Modified python version of Rolf Rolles' https://github.com/RolfRolles/HexRaysDeob to unflatten Emotet'S Control Flow Flattening

intelix-lambda-example

AWS Lambda intelix example

github-tldextract

intelix-postman

Postman collection for intelix

tools

Offbeat tools or utilities. YMMV. No warranty provided.

MTR

Repository for files shared by Sophos Managed Threat Response

intelix-example1

intelix-example2

rdpy

Remote Desktop Protocol in Twisted Python

intelix_anviron

Android app for cloud based security

video-transcripts

Transcripts of videos posted to our Youtube channel