moneta

/ \ / | / \ / \ / \ / / \ \ / Y | \ /| | / | //| | / | / / / / / Moneta v1.0 | Forrest Orr | 2020 REQUIRED -m |region|referenced|ioc -p |PID OPTIONAL -v detail|debug|surface -d --option from-base|statistics --filter unsigned-module|clr-prvx|clr-heap|metadata-modules --address --region-size -m...

Kalim_Backdoor

Informe de Análisis de Malware Kalim Backdoor Este informe tratará sobre la funcionalidad del malware Kalim Backdoor. Tabla de Contenidos: - ¿Qué es una Backdoor? - Análisis Técnico. - Resumen. - Tácticas y Técnicas MITRE ATT&CK. - IOCs. - Regla Yara. ¿Qué significa Backdoor?...

IOCScraper

IOC Scraper IOC Scraper utilises IOCPARSER service to fetch IOCs from different vendor Blogs, PDFs, and CSV files. Parsing IOCs is time-consuming process, using current script one can automatically extract and aggregate IOCs easily. Features Defanged IOCs : Supports extracting and defanging IOCs...

active_c2_ioc_public

+OPTIONS: ^ +TITLE: IOCs de C2 activos Nota Ten cuidado con las fechas firstseen/lastseen de cada entrada. No juzgues basándote solo en una dirección IP...

Log4j-IOCs

Log4j log4shell CVE-2021-44228 Lista de IOCs públicos IOCs públicos sobre o log4j CVE-2021-44228 Lista de IPssh 45.83.64.237 92.223.89.187 45.83.67.157 45.83.66.8 51.210.175.24 51.75.161.78 185.220.101.62 139.177.178.141 45.83.66.111 94.23.251.77 51.210.175.87 68.183.198.247 185.107.56.121...

Log4Shell_CVE-2021-44228_related_attacks_IOCs

Log4Shell（CVE-2021-44228）related attacks IOCs Las IPs de origen intentan ataques usando Apache Log4j RCE, e incluyen una gran proporción de nodos Tor. Para más detalles, consulte Attack-IP.md Para los IOCs de malware, botnets, etc., propagados mediante la vulnerabilidad log4j, consulte IOC-C2.md...

gundog

gundog gundog - PowerShell based guided hunting in Microsoft 365 Defender Gundog provides you with guided hunting in Microsoft 365 Defender. Especially if not only for Email and Endpoint Alerts at the moment. Functionality You provide an AlertID you might received via Email notification and gundo...

Malware-IOCs

Malware-IOCs Solo mis hallazgos de malware...

threat-research-and-intelligence

مدونات الاستخبارات الكاملة | نتائج المدونات | نتائج التقارير | المحاضرات العامة ℹ️ :: نظرة عامة هذا المستودع مخصص لنشر مؤشرات الاختراق IOCs وقواعد YARA والكود المصدري من تقارير استخبارات التهديدات الصادرة عن فريق BlackBerry للأبحاث والاستخبارات الخاصة بالتهديدات. للحصول على تقارير مفصلة بالكامل...

threat-research

Este repositorio contiene IoCs y reglas YARA relacionadas con la investigación de amenazas de Threatray, que se pueden encontrar aquí: https://www.threatray.com/blog Para actualizaciones, aspectos destacados de la investigación y perspectivas de análisis, síganos en X Twitter:...

CVE-2018-13379

IOCs pour Cobalt Strike/CVE-2018-13379 Tout le crédit revient à Awake/Arista/https://www.linkedin.com/in/kevin-romano-48071a42/ IOCs copiés de DD : https://awakesecurity.com/blog/exploiting-cve-2018-13379-a-case-study-of-threat-actors-exploiting-years-old-cves/...

iocs

Zscaler ThreatLabz IOCs このリポジトリには、Zscaler ThreatLabzチームによる侵害インジケーター（IOC）が含まれています。 Twitterでフォローしてください：@Threatlabz ブログ：https://www.zscaler.com/blogs/security-research...

log4j-CVE-2021-44228-Public-IoCs

Liste publique d'IoCs pour log4j log4shell CVE-2021-44228 IoCs publics concernant log4j CVE-2021-44228 log4shell basés sur Twitter et d'autres réseaux sociaux pull requests acceptées, je supprime les doublons automatiquement IPs...

detux

Detux: The Multiplatform Linux Sandbox Introduction: Detux is a sandbox developed to do traffic analysis of the Linux malwares and capture the IOCs by doing so. QEMU hypervisor is used to emulate Linux Debian for various CPU architectures. The following CPUs are currently supported: x86 x86-64 AR...

honeypot.rs

honeypot.rs Honeypot che intercetta la CVE-2023-46604 Apache ActiveMQ RCE Vulnerability ed è focalizzato sull'ottenimento di Indicatori di Compromissione. Questo honeypot può essere utilizzato in qualsiasi infrastruttura di Threat Intelligence per ottenere indirizzi IP dell'attaccante, campioni...

EITest-tools-scripts-IOCs

IOCs Indicadores de Comprometimento IOCs atualizados a cada 30 minutos relacionados às campanhas do EITest. O domínio stat-dns.com usado no algoritmo DGA do EITestfoi sinkholed. Como resultado, a campanha do EITest aparentemente foi encerrada desde 2018-03-15. backend-decipher.py Decodifica os...

Malware-IOCs

Malware Repository di Indicatori di Compromissione...

Malware-IOCs

Malware-IOCs È qui che pubblicherò gli IOC provenienti da indagini su malware...

cloud-sniper

Cloud Sniper : Detection-as-code platform Cloud Sniper is a comprehensive platform meticulously designed to streamline Cloud Security Operations. It swiftly responds to security incidents by analyzing and correlating cloud artifacts, ensuring a holistic view of the company's cloud security postur...

log4shell-iocs

Log4Shell-IOCs Feed IOC curati dal WatchGuard Threat Lab che contengono recenti tentativi di sondare o sfruttare CVE-2021-44228 in Log4j2 Commenti degli analisti 2021-12-17 Le minacce condivise in questo feed dovrebbero essere utilizzate per THREAT HUNTING e aggiunte a una WATCHLIST. Raccomandiam...