519 matches found
beagle
Beagle 1. About Beagle 2. Installation 1. Docker 2. Python Package 3. Configuration 3. Web Interface 1. Uploading Data 2. Browsing Existing Graphs 3. Graph Interface 1. Inspecting Nodes and Edges 2. Expanding Neighbours 3. Hiding Nodes 4. Running Mutators 5. Toggling Node and Edge Types 6...
CVE-2019-19871-AuditGuide
Update 1-22-2020 There is now a tool from FireEye that will help scan these items below. The key to this is that you need to have enough logs to go back to 1-9-2020 to have a chance to see what was done beyond the exploit was ran. If it finds .XML payload files then you need to use the informatio...
Revoke-Obfuscation
Revoke-Obfuscation v1.0 Introduction Revoke-Obfuscation is a PowerShell v3.0+ compatible PowerShell obfuscation detection framework. Authors Daniel Bohannon @danielhbohannon Lee Holmes @LeeHomes Research Blog Post:...
ioc-scanner-CVE-2019-19781
CVE-2019-19781 用侵害指標スキャナ このリポジトリには、CVE-2019-19781 に関連する Citrix ADC アプライアンスの侵害を検出するためのユーティリティが含まれています。 このユーティリティとそのリソースは、FireEye Mandiant の調査中に収集された侵害指標をエンコードしています。 詳細については、このツールのリリースを発表したブログ をご覧ください。 要約すると、このユーティリティは次のことを行います。 既存の侵害を特定するために最善を尽くします。 次のことは 行いません : 侵害を常に100%特定すること、または...
ReelPhish
Instructions for ReelPhish: This tool has been released along with a FireEye blog post. The blog post can be found at the following link: https://www.fireeye.com/blog/threat-research/2018/02/reelphish-real-time-two-factor-phishing-tool.html Installation Steps 1. The latest release of Python 2.7.x...
ioc-scanner-CVE-2019-19781
CVE-2019-19781 침해 지표 스캐너 이 저장소는 CVE-2019-19781과 관련된 Citrix ADC 어플라이언스의 침해를 탐지하는 유틸리티를 포함하고 있습니다. 유틸리티와 그 리소스는 FireEye Mandiant 조사 중 수집된 침해 지표를 인코딩합니다. 자세한 내용은 이 도구의 출시를 발표하는 블로그를 읽어보세요. 요약하면 이 유틸리티는 다음을 수행합니다: 기존 침해를 식별하기 위해 최선을 다합니다. 다음은 수행하지 않습니다 : 항상 100% 침해를 식별하지는 않습니다. 장치가 취약한지 여부를 알려주지 않습니다...
Malicious code in fireeye-main (PyPI)
--- -= Per source details. Do not edit below this line.=-...
MAL-2025-192893 Malicious code in fireeye-main (PyPI)
--- -= Per source details. Do not edit below this line.=-...
EUVD-2021-15617
Malware in sbrugna...
EUVD-2020-17729
Malware in sbrugna...
EUVD-2021-15616
Malware in sbrugna...
EUVD-2024-16114
Malicious code in bioql PyPI...
EUVD-2024-16115
Malicious code in bioql PyPI...
EUVD-2024-16110
Malicious code in bioql PyPI...
EUVD-2025-12242
Malicious code in bioql PyPI...
EUVD-2024-16111
Malicious code in bioql PyPI...
EUVD-2024-16116
Malicious code in bioql PyPI...
EUVD-2024-16112
Malicious code in bioql PyPI...
EUVD-2024-16113
Malicious code in bioql PyPI...
CVE-2020-25034
eMPS prior to eMPS 9.0 FireEye EX 3500 devices allows remote authenticated users to conduct SQL injection attacks via the sort, sortby, searchURL, or searchattachment parameter to the email search feature...