ioc-scanner-CVE-2019-19781

Scanner di Indicatori di Compromissione per CVE-2019-19781 Questa repository contiene un'utility per rilevare compromissioni degli apparati Citrix ADC correlati a CVE-2019-19781. L'utility e le sue risorse codificano gli indicatori di compromissione raccolti durante le investigazioni FireEye...

ioc-scanner-CVE-2019-19781

Scanner di Indicatori di Compromissione per CVE-2019-19781 Questo repository contiene un'utilità per rilevare compromissioni degli apparati Citrix ADC correlate a CVE-2019-19781. L'utilità e le sue risorse codificano gli indicatori di compromissione raccolti durante le indagini di FireEye Mandian...

Fenrir

Fenrir Semplice scanner IOC Bash Fenrir è un semplice script Bash per la scansione IOC. Permette di scansionare sistemi Linux/Unix/OSX per i seguenti Indicator of Compromise IOC: Hash MD5, SHA1 e SHA256 usando md5sum, sha1sum, sha -a 256 Nomi file stringa - verificata come sottostringa del percor...

odin

Odin Odin ist ein zentraler IoC-Scanner basierend auf Loki Table of Contents Allgemeine Informationen Anforderungen Abrufen Loki bereitstellen Sammeln Parsen Allgemeine Informationen Diese Anwendung holt die neueste Version von Loki und lädt sie mit einem PowerShell-Skript auf alle Maschinen...

agentic-ioc-scanner

agentic-ioc-scanner Scanner IOC per strumenti di coding AI agentici — rileva Mini Shai-Hulud, Gemini CLI RCE, Cursor CVE-2026-26268 e DPRK PromptMink. Un kit di rilevamento per individuare la compromissione degli assistenti di coding AI agentici Claude Code, Gemini CLI, Cursor e delle dipendenze...

citrix-ioc-scanner-cve-2023-3519

Scanner für Kompromittierungsindikatoren für CVE-2023-3519 Dieses Repository enthält ein Werkzeug zur Erkennung von Kompromittierungen von Citrix-ADC-Appliances im Zusammenhang mit CVE-2023-3519. Das Werkzeug und seine Ressourcen kodieren Kompromittierungsindikatoren, die während...

CVE-2019-19871-AuditGuide

Update 1-22-2020 Es gibt jetzt ein Tool von FireEye, das beim Scannen der folgenden Elemente hilft. Der Schlüssel dabei ist, dass Sie genügend Protokolle haben müssen, um bis zum 1.9.2020 zurückzugehen, um eine Chance zu haben, zu sehen, was über die Ausführung des Exploits hinaus getan wurde. We...

spyre

Spyre ...a simple, self-contained modular host-based IOC scanner Spyre is a simple host-based IOC scanner built around the YARA pattern matching engine and other scan modules. The main goal of this project is easy operationalization of YARA rules and other indicators of compromise. Users need to...

Wp2shell-ioc-scanner

=== wp2shell IOC Scanner === Collaboratori: michaelkanda URI autore: https://designare.at URI plugin: https://designare.at Tag: security, incident-response, wordpress, shadow-admin, ioc Richiede almeno: 6.0 Testato fino a: 7.0 Richiede PHP: 7.4 Versione stabile: 1.3.1 Licenza: GPLv2 o successive...

muad-dib

Installazione | Utilizzo | Funzionalità | VS Code | CI/CD Versione francese Perché MUAD'DIB?...

Odin - Central IoC Scanner Based On Loki

Odin is a central IoC scanner based on Loki General Info This application Loki latest version and download it on all machines using a powershell script and run it then this app receives the respose from all machines and parse the feed in CSV form. Requirements 1. Python +3.5 2. PyQT5 3. psutil 4...

Nice Try: 501 (Ransomware) Not Implemented

An Ever-Evolving Threat Since January 10, 2020, FireEye has tracked extensive global exploitation of CVE-2019-19781, which continues to impact Citrix ADC and Gateway instances that are unpatched or do not have mitigations applied. We previously reported on attackers’ swift attempts to exploit thi...

Simple IOC and Incident Response Scanner: Loki

LOKI is a free and simple IOC scanner, a complete rewrite of main analysis modules of our full featured APT Scanner THOR. IOC stands for „Indicators of Compromise“. These indicators can be derived from published incident reports, forensic analyses or malware sample collections in your Lab. LOKI...

Loki - Scanner for Simple Indicators of Compromise

Simple IOC Scanner Detection is based on four detection methods: 1. File Name IOC Regex match on full file path/name 2. Yara Rule Check Yara signature match on file data and process memory 3. Hash check Compares known malicious hashes MD5, SHA1, SHA256 with scanned files The Windows binary is...