beagle

Beagle 1. About Beagle 2. Installation 1. Docker 2. Python Package 3. Configuration 3. Web Interface 1. Uploading Data 2. Browsing Existing Graphs 3. Graph Interface 1. Inspecting Nodes and Edges 2. Expanding Neighbours 3. Hiding Nodes 4. Running Mutators 5. Toggling Node and Edge Types 6...

Revoke-Obfuscation

Revoke-Obfuscation v1.0 Introduction Revoke-Obfuscation is a PowerShell v3.0+ compatible PowerShell obfuscation detection framework. Authors Daniel Bohannon @danielhbohannon Lee Holmes @LeeHomes Research Blog Post:...

CVE-2019-19871-AuditGuide

Update 1-22-2020 There is now a tool from FireEye that will help scan these items below. The key to this is that you need to have enough logs to go back to 1-9-2020 to have a chance to see what was done beyond the exploit was ran. If it finds .XML payload files then you need to use the informatio...

ioc-scanner-CVE-2019-19781

Indicator of Compromise Scanner for CVE-2019-19781 This repository contains a utility for detecting compromises of Citrix ADC Appliances related to CVE-2019-19781. The utility, and its resources, encode indicators of compromise collected during FireEye Mandiant investigations. To learn more, plea...

ReelPhish

Instructions for ReelPhish: This tool has been released along with a FireEye blog post. The blog post can be found at the following link: https://www.fireeye.com/blog/threat-research/2018/02/reelphish-real-time-two-factor-phishing-tool.html Installation Steps 1. The latest release of Python 2.7.x...

ioc-scanner-CVE-2019-19781

Indicator of Compromise Scanner for CVE-2019-19781 This repository contains a utility for detecting compromises of Citrix ADC Appliances related to CVE-2019-19781. The utility, and its resources, encode indicators of compromise collected during FireEye Mandiant investigations. To learn more, plea...

MAL-2025-192893 Malicious code in fireeye-main (PyPI)

--- -= Per source details. Do not edit below this line.=-...

Malicious code in fireeye-main (PyPI)

--- -= Per source details. Do not edit below this line.=-...

EUVD-2021-15616

Malware in sbrugna...

EUVD-2021-15617

Malware in sbrugna...

EUVD-2020-17729

Malware in sbrugna...

EUVD-2024-16114

Malicious code in bioql PyPI...

EUVD-2024-16115

Malicious code in bioql PyPI...

EUVD-2025-12242

Malicious code in bioql PyPI...

EUVD-2024-16110

Malicious code in bioql PyPI...

EUVD-2024-16111

Malicious code in bioql PyPI...

EUVD-2024-16112

Malicious code in bioql PyPI...

EUVD-2024-16113

Malicious code in bioql PyPI...

EUVD-2024-16116

Malicious code in bioql PyPI...

CVE-2020-25034

eMPS prior to eMPS 9.0 FireEye EX 3500 devices allows remote authenticated users to conduct SQL injection attacks via the sort, sortby, searchURL, or searchattachment parameter to the email search feature...