beagle

Beagle 1. About Beagle 2. Installation 1. Docker 2. Python Package 3. Configuration 3. Web Interface 1. Uploading Data 2. Browsing Existing Graphs 3. Graph Interface 1. Inspecting Nodes and Edges 2. Expanding Neighbours 3. Hiding Nodes 4. Running Mutators 5. Toggling Node and Edge Types 6...

CVE-2019-19871-AuditGuide

更新 2020-01-22 现在有一个来自 FireEye 的工具可以帮助扫描以下项目。关键在于你需要有足够多的日志可以回溯到 2020-01-09，才有机会看到漏洞被利用之后的操作。如果它找到了 .XML 负载文件，那么你需要根据以下信息来决定采取什么行动。 https://www.fireeye.com/blog/products-and-services/2020/01/fireeye-and-citrix-tool-scans-for-iocs-related-to-vulnerability.html 工具下载...

Revoke-Obfuscation

Revoke-Obfuscation v1.0 소개 Revoke-Obfuscation은 PowerShell v3.0+와 호환되는 PowerShell 난독화 탐지 프레임워크입니다. 저자 Daniel Bohannon @danielhbohannon Lee Holmes @LeeHomes 연구 블로그 게시글: https://www.fireeye.com/blog/threat-research/2017/07/revoke-obfuscation-powershell.html 백서:...

ioc-scanner-CVE-2019-19781

CVE-2019-19781 用侵害指標スキャナ このリポジトリには、CVE-2019-19781 に関連する Citrix ADC アプライアンスの侵害を検出するためのユーティリティが含まれています。 このユーティリティとそのリソースは、FireEye Mandiant の調査中に収集された侵害指標をエンコードしています。 詳細については、このツールのリリースを発表したブログ をご覧ください。 要約すると、このユーティリティは次のことを行います。 既存の侵害を特定するために最善を尽くします。 次のことは 行いません : 侵害を常に100%特定すること、または...

ReelPhish

Istruzioni per ReelPhish: Questo strumento è stato rilasciato insieme a un post sul blog di FireEye. Il post sul blog può essere trovato al seguente link: https://www.fireeye.com/blog/threat-research/2018/02/reelphish-real-time-two-factor-phishing-tool.html Passaggi di installazione 1. È richiest...

ioc-scanner-CVE-2019-19781

Scanner di Indicatori di Compromissione per CVE-2019-19781 Questo repository contiene un'utilità per rilevare compromissioni degli apparati Citrix ADC correlate a CVE-2019-19781. L'utilità e le sue risorse codificano gli indicatori di compromissione raccolti durante le indagini di FireEye Mandian...

Malicious code in fireeye-main (PyPI)

--- -= Per source details. Do not edit below this line.=-...

MAL-2025-192893 Malicious code in fireeye-main (PyPI)

--- -= Per source details. Do not edit below this line.=-...

EUVD-2021-15616

Malware in sbrugna...

EUVD-2020-17729

Malware in sbrugna...

EUVD-2021-15617

Malware in sbrugna...

EUVD-2024-16114

Malicious code in bioql PyPI...

EUVD-2024-16115

Malicious code in bioql PyPI...

EUVD-2024-16110

Malicious code in bioql PyPI...

EUVD-2025-12242

Malicious code in bioql PyPI...

EUVD-2024-16113

Malicious code in bioql PyPI...

EUVD-2024-16112

Malicious code in bioql PyPI...

EUVD-2024-16116

Malicious code in bioql PyPI...

EUVD-2024-16111

Malicious code in bioql PyPI...

CVE-2020-25034

eMPS prior to eMPS 9.0 FireEye EX 3500 devices allows remote authenticated users to conduct SQL injection attacks via the sort, sortby, searchURL, or searchattachment parameter to the email search feature...