threat-analysis

Advanced Sysmon ATT&CK configuration focusing on Detecting the Most Techniques per Data source in MITRE ATT&CK, Provide Visibility into Forensic Artifact Events for UEBA, Detect Exploitation events with wide CVE Coverage, and Risk Scoring of CVE, UEBA, Forensic, and MITRE ATT&CK Events.

Updated Dec 16, 2022
Batchfile

CYB3RMX / Qu1cksc0pe

Star

All-in-One malware analysis tool.

Updated Apr 17, 2023
YARA

satan1a / TheRoadOfSO

Star

学习安全运营的记录 | The knowledge base of security operation

wiki cybersecurity knowledge-base soc threat-analysis security-analysis security-operations security-operation

Updated Sep 3, 2022
HTML

TalEliyahu / Threat_Model_Examples

Star

Collection of Threat Models

threat threat-modeling risk-assessment threat-analysis

Updated May 30, 2022

ecstatic-nobel / OSweep

Star

Don't Just Search OSINT. Sweep It.

python osint splunk cybersecurity certificate-transparency ransomware threat-hunting malware-analysis scanners cybercrime threat-analysis pivoting threat-intelligence urlscan-io threatcrowd urlhaus

Updated Jan 26, 2021
Python

t4d / PhishingKitHunter

Star

Find phishing kits which use your brand/organization's files and image.

security phishing threat-hunting fraud-prevention phishing-attacks threat-analysis fraud-detection threat-intelligence phishing-sites

Updated Jan 21, 2019
Python

zdhenard42 / SOC-Multitool

Star

A powerful and user-friendly browser extension that streamlines investigations for security professionals.

chrome-extension cybersecurity browser-extension threat-hunting threat-analysis threat-intelligence

Updated Apr 19, 2023
JavaScript

Graylog2 / graylog-plugin-threatintel

Star

Graylog Processing Pipeline functions to enrich log messages with IoC information from threat intelligence databases

graylog threat-score whois threat abuse threatintel spamhaus whois-lookup graylog-plugin threat-analysis otx whois-information

Updated May 3, 2023
Java

401trg / detections

Star

This repository contains all public indicators identified by 401trg during the course of our investigations. It also includes relevant yara rules and ids signatures to detect these indicators.

ioc verizon threat-hunting indicators threat-analysis indicators-of-compromise 401trg protectwise

Updated Apr 14, 2021
Python

ecstatic-nobel / Analyst-Arsenal

Star

A toolkit for Security Researchers

python osint scanner cybersecurity certificate-transparency infosec threat-hunting malware-analysis webshell threat-analysis threat-intelligence certstream threat-detection opendir defaced

Updated Sep 2, 2019
Python

CERTCC / Vulnerability-Data-Archive

Star

With the hope that someone finds the data useful, we periodically publish an archive of almost all of the non-sensitive vulnerability information in our vulnerability reports database. See also https://github.com/CERTCC/Vulnerability-Data-Archive-Tools

threat cert vulnerability threatintel cve threat-analysis threat-intelligence vulnerability-report vulnerability-data vulnerability-notes

Updated Jun 22, 2020

alvin-tosh / Infosec-and-Hacking-Scripts

Star

🚀 This is a collection of hacking🔥 and pentesting 🧐 scripts to help with enumeration, OSINT, exploitation and post exploitation automated scripts to make hacking easier🌠. Have fun!😎