signature-base

Signature-Base Signature-Base는 당사 스캐너 LOKI 및 THOR Lite를 위한 YARA 시그니처 및 IOC 데이터베이스입니다. Signature-Base의 초점 1. 최소한의 오탐지를 가진 고품질 YARA 규칙 및 IOC 2. 명확한 구조 3. 일관된 규칙 형식 디렉터리 구조 iocs - 간단한 IOC 파일 CSV yara - YARA 규칙 threatintel - 위협 인텔 API 수신기 MISP, OTX misc - 기타 입력 파일 IOC 또는 시그니처가 아님 YARA 규칙의 외부 변수 LOKI ...

Malware Information Sharing Platform: MISP

Malware Information Sharing Platform MISP, Malware Information Sharing Platform and Threat Sharing, is an open source software solution for collecting, storing, distributing and sharing cyber security indicators and threat about cyber security incidents analysis and malware analysis. MISP is...

[MISP v2.1] Malware Information Sharing Platform

The problem that we experienced in the past was the difficulty to exchange information about targeted malwares and attacks within a group of trusted partners, or a bilateral agreement. Even today much of the information exchange happens in unstructured reports where you have to copy-paste the...