EITest-tools-scripts-IOCs

IOCs Indicadores de Compromiso IOCs actualizados cada 30 minutos relacionados con las campañas de EITest. El dominio stat-dns.com utilizado en el algoritmo DGA de EITestha sido sinkholeado. Como resultado, la campaña EITest parece haber sido cerrada desde el 2018-03-15. backend-decipher.py...

active_c2_ioc_public

+OPTIONS: ^: +TITLE: 活跃 C2 IOCs 注意 请谨慎对待每条记录中的 firstseen/lastseen 日期。不要仅凭一个 IP 地址就下判断。...

log4j-CVE-2021-44228-Public-IoCs

log4j log4shell CVE-2021-44228 공개 IoCs 목록 Twitter 및 기타 소셜 네트워크를 기반으로 한 log4j CVE-2021-44228 log4shell에 대한 공개 IoCs입니다 pull requests 환영합니다, 중복은 자동으로 제거합니다 IP 주소 https://github.com/Sh0ckFR/log4j-CVE-2021-44228-Public-IoCs/raw/main/ips.txt 콜백 도메인...

moneta

/ \ / | / \ / \ / \ / / \ \ / Y | \ /| | / | //| | / | / / / / / Moneta v1.0 | Forrest Orr | 2020 REQUIRED -m |region|referenced|ioc -p |PID OPTIONAL -v detail|debug|surface -d --option from-base|statistics --filter unsigned-module|clr-prvx|clr-heap|metadata-modules --address --region-size -m...

Kalim_Backdoor

Informe de Análisis de Malware Kalim Backdoor Este informe tratará sobre la funcionalidad del malware Kalim Backdoor. Tabla de Contenidos: - ¿Qué es una Backdoor? - Análisis Técnico. - Resumen. - Tácticas y Técnicas MITRE ATT&CK. - IOCs. - Regla Yara. ¿Qué significa Backdoor?...

IOCScraper

IOC Scraper IOC Scraper utilises IOCPARSER service to fetch IOCs from different vendor Blogs, PDFs, and CSV files. Parsing IOCs is time-consuming process, using current script one can automatically extract and aggregate IOCs easily. Features Defanged IOCs : Supports extracting and defanging IOCs...

Log4j-IOCs

Log4j log4shell CVE-2021-44228 Lista de IOCs públicos IOCs públicos sobre o log4j CVE-2021-44228 Lista de IPssh 45.83.64.237 92.223.89.187 45.83.67.157 45.83.66.8 51.210.175.24 51.75.161.78 185.220.101.62 139.177.178.141 45.83.66.111 94.23.251.77 51.210.175.87 68.183.198.247 185.107.56.121...

Log4Shell_CVE-2021-44228_related_attacks_IOCs

Log4Shell（CVE-2021-44228）related attacks IOCs Las IPs de origen intentan ataques usando Apache Log4j RCE, e incluyen una gran proporción de nodos Tor. Para más detalles, consulte Attack-IP.md Para los IOCs de malware, botnets, etc., propagados mediante la vulnerabilidad log4j, consulte IOC-C2.md...

gundog

gundog gundog - PowerShell based guided hunting in Microsoft 365 Defender Gundog provides you with guided hunting in Microsoft 365 Defender. Especially if not only for Email and Endpoint Alerts at the moment. Functionality You provide an AlertID you might received via Email notification and gundo...

Malware-IOCs

Malware-IOCs 単に私が発見したマルウェアの情報です...

threat-research

This repository contains IoCs and YARA rules related to Threatray's threat research, which can be found here: https://www.threatray.com/blog For updates, research highlights, and analysis insights, follow us on X Twitter: https://x.com/ThreatrayLabs The repository is organized per post, which...

threat-research-and-intelligence

完全版インテリジェンスブログ | ブログ版レポート | レポート版要約 | 公開講演 ℹ️ :: 概要 このリポジトリは、BlackBerry Threat Research & Intelligence チームが公開した脅威インテリジェンスレポートから、IOC、YARA ルール、ソースコードを提供するためのものです。 スクリーンショットを含む完全な詳細レポートは ➡️ こちら 関連IOCを含む簡潔なブログ形式のレポートは ➡️ こちら 完全な詳細レポートの要約とIOCは ➡️ こちら 🔍 :: YARA ルール YARA...

CVE-2018-13379

IOCs pour Cobalt Strike/CVE-2018-13379 Tout le crédit revient à Awake/Arista/https://www.linkedin.com/in/kevin-romano-48071a42/ IOCs copiés de DD : https://awakesecurity.com/blog/exploiting-cve-2018-13379-a-case-study-of-threat-actors-exploiting-years-old-cves/...

iocs

Zscaler ThreatLabz IOCs このリポジトリには、Zscaler ThreatLabzチームによる侵害インジケーター（IOC）が含まれています。 Twitterでフォローしてください：@Threatlabz ブログ：https://www.zscaler.com/blogs/security-research...

detux

Detux: The Multiplatform Linux Sandbox Introduction: Detux is a sandbox developed to do traffic analysis of the Linux malwares and capture the IOCs by doing so. QEMU hypervisor is used to emulate Linux Debian for various CPU architectures. The following CPUs are currently supported: x86 x86-64 AR...

honeypot.rs

honeypot.rs Honeypot che intercetta la CVE-2023-46604 Apache ActiveMQ RCE Vulnerability ed è focalizzato sull'ottenimento di Indicatori di Compromissione. Questo honeypot può essere utilizzato in qualsiasi infrastruttura di Threat Intelligence per ottenere indirizzi IP dell'attaccante, campioni...

Malware-IOCs

Malware Repository di Indicatori di Compromissione...

Malware-IOCs

Malware-IOCs È qui che pubblicherò gli IOC provenienti da indagini su malware...

cloud-sniper

Cloud Sniper : Detection-as-code platform Cloud Sniper is a comprehensive platform meticulously designed to streamline Cloud Security Operations. It swiftly responds to security incidents by analyzing and correlating cloud artifacts, ensuring a holistic view of the company's cloud security postur...

log4shell-iocs

Log4Shell-IOCs Feed IOC curati dal WatchGuard Threat Lab che contengono recenti tentativi di sondare o sfruttare CVE-2021-44228 in Log4j2 Commenti degli analisti 2021-12-17 Le minacce condivise in questo feed dovrebbero essere utilizzate per THREAT HUNTING e aggiunte a una WATCHLIST. Raccomandiam...