msticpy

MSTIC Jupyter 및 Python 보안 도구 Microsoft 위협 인텔리전스 Python 보안 도구. msticpy 는 Jupyter Notebook에서 정보 보안 조사 및 헌팅을 위한 라이브러리입니다. 다음과 같은 기능을 포함합니다: 여러 소스에서 로그 데이터 쿼리 위협 인텔리전스, 지리적 위치 및 Azure 리소스 데이터로 데이터 보강 로그에서 활동 지표IoA 추출 및 인코딩된 데이터 압축 풀기 비정상 세션 탐지 및 시계열 분해와 같은 정교한 분석 수행 대화형 타임라인, 프로세스 트리 및 다차원 모프 차트를 사용하...

msticpy

MSTIC Jupyter and Python Security Tools Microsoft Threat Intelligence Python Security Tools. msticpy is a library for InfoSec investigation and hunting in Jupyter Notebooks. It includes functionality to: query log data from multiple sources enrich the data with Threat Intelligence, geolocations a...

memOptix

memOptix 이 Jupyter 노트북은 DFIR 전문가가 Windows 메모리 덤프를 트라이지하는 것을 돕기 위해 만들어졌습니다. 참고로, 이 노트북은 CrowdStrike의 Supermem python 스크립트https://github.com/CrowdStrike/SuperMem에서 생성된 출력을 기반으로 만들어졌습니다. 이 노트북을 실행하기 전에 메모리 덤프를 대상으로 SuperMem 트라이지 모드 2 또는 3을 실행해야 합니다. 대화형으로 메모리 덤프에 Volatility를 실행하여 필요한 출력을 생성하려는 경우, 이...

Using Python to unearth a goldmine of threat intelligence from leaked chat logs

Dealing with a great amount of data can be time consuming, thus using Python can be very powerful to help analysts sort information and extract the most relevant data for their investigation. The open-source tools library, MSTICPy, for example, is a Python tool dedicated to threat intelligence. I...

Using Python to unearth a goldmine of threat intelligence from leaked chat logs

Dealing with a great amount of data can be time consuming, thus using Python can be very powerful to help analysts sort information and extract the most relevant data for their investigation. The open-source tools library, MSTICPy, for example, is a Python tool dedicated to threat intelligence. I...

MSTICPy January 2022 hackathon highlights

During the month of January 2022, the Microsoft Threat Intelligence Center MSTIC ran its inaugural hackathon for the open-source Jupyter and Python Security Tools library, MSTICPy. We asked the security community for their contributions to expand and improve MSTICPy’s features and capabilities, a...

MSTICPy January 2022 hackathon highlights

During the month of January 2022, the Microsoft Threat Intelligence Center MSTIC ran its inaugural hackathon for the open-source Jupyter and Python Security Tools library, MSTICPy. We asked the security community for their contributions to expand and improve MSTICPy’s features and capabilities, a...

Join us at InfoSec Jupyterthon 2021

We’re excited to invite our community of infosec analysts and engineers to the second annual InfoSec Jupyterthon taking place on December 2-3, 2021. This is an online event organized by our friends in the Open Threat Research Forge, together with folks from the Microsoft Threat Intelligence Cente...