threat-research-and-intelligence

Blog di Intelligence Completi | Risultati dei Blog | Risultati dei Report | Talk Pubblici ℹ️ :: Panoramica Questo repository serve alla diffusione di IOC, regole YARA e codice sorgente provenienti dai report di threat intelligence pubblicati dal team BlackBerry Threat Research & Intelligence. Per...

iocs

Indicatori di Compromissione Zscaler ThreatLabz Questo repository contiene gli Indicatori di Compromissione IOC del team Zscaler ThreatLabz. Seguici su Twitter: @Threatlabz Blog: https://www.zscaler.com/blogs/security-research...

active_c2_ioc_public

+OPTIONS: ^: +TITLE: IOC C2 attivi Nota Presta attenzione alle date firstseen/lastseen in ogni voce. Non giudicare basandoti solo su un indirizzo IP...

Malware-IOCs

Malware-IOCs Solo i miei ritrovamenti di malware...

Kalim_Backdoor

Kalim Backdoor Malware Analysebericht Dieser Bericht behandelt die Funktionsweise der Kalim Backdoor Malware. Inhaltsverzeichnis: - Was ist ein Backdoor? - Technische Analyse. - Zusammenfassung. - Taktiken & Techniken MITRE ATT&CK. - IOCs. - Yara-Regel. Was bedeutet Backdoor?...

threat-research

Dieses Repository enthält IoCs und YARA-Regeln, die mit der Bedrohungsforschung von Threatray zusammenhängen und hier zu finden sind: https://www.threatray.com/blog Für Updates, Forschungshighlights und Analyse-Einblicke folgen Sie uns auf X Twitter: https://x.com/ThreatrayLabs Das Repository ist...

log4j-CVE-2021-44228-Public-IoCs

Lista pública de IoCs do log4j log4shell CVE-2021-44228 IoCs públicos sobre log4j CVE-2021-44228 log4shell baseados no Twitter e outras redes sociais pull requests aceitos, eu removo duplicatas automaticamente IPs https://github.com/Sh0ckFR/log4j-CVE-2021-44228-Public-IoCs/raw/main/ips.txt Domíni...

Log4j-IOCs

Log4j log4shell CVE-2021-44228 Elenco IOCs pubblici IOCs pubblici su log4j CVE-2021-44228 Elenco IPsh 45.83.64.237 92.223.89.187 45.83.67.157 45.83.66.8 51.210.175.24 51.75.161.78 185.220.101.62 139.177.178.141 45.83.66.111 94.23.251.77 51.210.175.87 68.183.198.247 185.107.56.121 147.182.154.110...

CVE-2018-13379

IOCs für CObalt Strike/CVE-2018-13379 Alle Anerkennung geht an Awake/Arista/https://www.linkedin.com/in/kevin-romano-48071a42/ IOCs kopiert von DD: https://awakesecurity.com/blog/exploiting-cve-2018-13379-a-case-study-of-threat-actors-exploiting-years-old-cves/...

detux

Detux: The Multiplatform Linux Sandbox Introduction: Detux is a sandbox developed to do traffic analysis of the Linux malwares and capture the IOCs by doing so. QEMU hypervisor is used to emulate Linux Debian for various CPU architectures. The following CPUs are currently supported: x86 x86-64 AR...

honeypot.rs

honeypot.rs Honeypot che intercetta la CVE-2023-46604 Apache ActiveMQ RCE Vulnerability ed è focalizzato sull'ottenimento di Indicatori di Compromissione. Questo honeypot può essere utilizzato in qualsiasi infrastruttura di Threat Intelligence per ottenere indirizzi IP dell'attaccante, campioni...

EITest-tools-scripts-IOCs

IOCs Indicadores de Comprometimento IOCs atualizados a cada 30 minutos relacionados às campanhas do EITest. O domínio stat-dns.com usado no algoritmo DGA do EITestfoi sinkholed. Como resultado, a campanha do EITest aparentemente foi encerrada desde 2018-03-15. backend-decipher.py Decodifica os...

Log4Shell_CVE-2021-44228_related_attacks_IOCs

Log4Shell（CVE-2021-44228）related attacks IOCs Gli IP di origine utilizzano tentativi di attacco Apache Log4j RCE, che includono una grande parte di nodi Tor, vedi Attack-IP.md Per gli IOC di programmi dannosi, Botnet, ecc. che si diffondono utilizzando la vulnerabilità log4j, vedi IOC-C2.md Per l...

Malware-IOCs

Malware Repository di Indicatori di Compromissione...

Malware-IOCs

Malware-IOCs È qui che pubblicherò gli IOC provenienti da indagini su malware...

gundog

gundog gundog - PowerShell based guided hunting in Microsoft 365 Defender Gundog provides you with guided hunting in Microsoft 365 Defender. Especially if not only for Email and Endpoint Alerts at the moment. Functionality You provide an AlertID you might received via Email notification and gundo...

moneta

/ \ / | / \ / \ / \ / / \ \ / Y | \ /| | / | //| | / | / / / / / Moneta v1.0 | Forrest Orr | 2020 REQUIRED -m |region|referenced|ioc -p |PID OPTIONAL -v detail|debug|surface -d --option from-base|statistics --filter unsigned-module|clr-prvx|clr-heap|metadata-modules --address --region-size -m...

IOCScraper

IOC Scraper IOC Scraper utilises IOCPARSER service to fetch IOCs from different vendor Blogs, PDFs, and CSV files. Parsing IOCs is time-consuming process, using current script one can automatically extract and aggregate IOCs easily. Features Defanged IOCs : Supports extracting and defanging IOCs...

cloud-sniper

Cloud Sniper : Detection-as-code platform Cloud Sniper is a comprehensive platform meticulously designed to streamline Cloud Security Operations. It swiftly responds to security incidents by analyzing and correlating cloud artifacts, ensuring a holistic view of the company's cloud security postur...

log4shell-iocs

Log4Shell-IOCs Feed IOC curati dal WatchGuard Threat Lab che contengono recenti tentativi di sondare o sfruttare CVE-2021-44228 in Log4j2 Commenti degli analisti 2021-12-17 Le minacce condivise in questo feed dovrebbero essere utilizzate per THREAT HUNTING e aggiunte a una WATCHLIST. Raccomandiam...