malpedia-flossed

Malpedia FLOSSed Este repositorio contiene el resultado de la herramienta FLARE FLOSS aplicada a todas las muestras desempaquetadas y volcadas en Malpedia, preprocesadas para su uso posterior. Tenemos la intención de actualizar esta colección periódicamente. En la última ejecución de enero de 202...

ioccheck

ioccheck A tool for simplifying the process of researching file hashes, IP addresses, and other indicators of compromise IOCs. Features Look up hashes across multiple threat intelligence services, from a single command or a few lines of Python. Currenty supports the following services: VirusTotal...

From IOCs to Group Profiles: on the Specificity of Threat Group Behaviors in CTI Knowledge Bases

Indicators of Compromise IOCs such as IP addresses, file hashes, and domain names are commonly used for threat detection and attribution. However, IOCs tend to be short-lived as they are easy to change. As a result, the cybersecurity community is shifting focus towards more persistent behavioral...