zoni171

mkYARA

Generating YARA rules based on binary code

detections

This repository contains all public indicators identified by 401trg during the course of our investigations. It also includes relevant yara rules and ids signatures to detect these indicators.

PyMISP

Python library using the MISP Rest API

Microsoft-365-Defender-Hunting-Queries

Sample queries for Advanced hunting in Microsoft 365 Defender

awesome-yara

A curated list of awesome YARA rules, tools, and people.

YaraGuardian

Django web interface for managing Yara rules

blackhat-arsenal-tools

Official Black Hat Arsenal Security Tools Repository

IOCs-in-CSV-format

The repository contains IOCs in CSV format for APT, Cyber Crimes, Malware and Trojan and whatever I found as part of hunting and research

IOCs

Indicators of compromise for threat intelligence

ponmocup

Ponmocup Indicators of Compromise

mofang

Mofang Indicators of Compromise

cryptophp

CryptoPHP Indicators of Compromise

YaraRules

targetedthreats

Collection of IOCs related to targeting of civil society

awesome-osint

:scream: A curated list of amazingly awesome OSINT

xray

XRay is a tool for recon, mapping and OSINT gathering from public networks.

dnssearch

A subdomain enumeration tool.

golang-misp

Golang Library to interact with your MISP instance

packets

Packet Captures

Certificate-Authority-Situational-Awareness

Identifies unexpected and prohibited certificate authority certificates on Windows systems. #nsacyber

malware-indicators

Citizen Lab Malware Reports

CRASHOVERRIDE

IOCs for CRASHOVERRIDE malware framework

FireMISP

FireEye Alert json files to MISP Malware information sharing plattform (Alpha)

awesome-iocs

A collection of sources of indicators of compromise.

chopshop

Protocol Analysis/Decoder Framework

logster

Parse log files, generate metrics for Graphite and Ganglia

virustotal

Python3 script for virustotal public API

Virustotal-Module

Virustotal Python Module for the Public Virustotal.com's API

VirusTotal_API_Tool

A Tool To Leverage Virus Total's Private API Key

VirusTotalApi

VirusTotal Full api