Home / Python / Security related resources

Threat intelligence and threat detection indicators (IOC, IOA)

Threat intelligence and threat detections This repo contains threat intelligence information and threat detection indicators (IOC, IOA) shared by Swis
Information
Category: Python / Security related resources
Watchers: 19
Star: 23
Fork: 5
Last update: Oct 5, 2021
Resource links
https://github.com/swisscom/detections

Threat intelligence and threat detections

This repo contains threat intelligence information and threat detection indicators (IOC, IOA) shared by Swisscom CSIRT.

Content Indicators Communication
Ryuk CobalStrike C2's cobaltstrike_c2s.txt, ryuk.yar Tweet
0 Open More issues
Closed

added Trickbot Network Activity

opened Nov 27, 2020 by yt0ng 0
Closed

Trickbot Suricata with PCAP to detect data exfiltration

opened Nov 27, 2020 by yt0ng 0
Closed

added yara rule to detect ryuk dropper

opened Oct 29, 2020 by yt0ng 0
Closed

added ryuk cobaltstrike c2s

opened Oct 29, 2020 by yt0ng 0

Contents

    agoda-com C# IoC extension library, used at Agoda for Registration of classes into IoC container based on Attributes.
    MiladMSFT Microsoft Threat Protection Advance Hunting Cheat Sheet
    ShilpeshTrivedi This Repo contains resource for Malware Analysis, Incident Response, Threat Intelligence, Threat Hunting
    CRED-CLUB ARTIF is a new advanced real time threat intelligence framework built that adds another abstraction layer on the top of MISP to identify threats and malicious web traffic on the basis of IP reputation and historical data.
    Orange-Cyberdefense Log4Shell IOCs from CERT Orange Cyberdefense Threat Intelligence Datalake
    curated-intel A collection of intelligence about Log4Shell and its exploitation activity.
    D4stiny PeaceMaker Threat Detection is a Windows kernel-based application that detects advanced techniques used by malware.
    0xj3lly Log4j Detection and IOC scanner written in Bash
    fireeye Threat Pursuit Virtual Machine (VM): A fully customizable, open-sourced Windows-based distribution focused on threat intelligence analysis and hunting designed for intel and malware analysts as well as threat hunters to get up and running quickly.
    p-ranav Activity Indicators for Modern C++
    OpenCTI-Platform Open Cyber Threat Intelligence Platform
    twopirllc Technical Analysis Indicators - Pandas TA is an easy to use Python 3 Pandas Extension with 100+ Indicators
    activecm Real Intelligence Threat Analytics
    microsoft Microsoft Threat Intelligence Python Security Tools.
    Cyb3r-Monk Implementation of RITA (Real Intelligence Threat Analytics) in Jupyter Notebook
    bytedance AgentSmith-HIDS is a Cloud-Native Host-Based Intrusion Detection solution project to provide next-generation Threat Detection and Behavior Audition with modern architecture.
    vaguileradiaz The most complete open-source tool for Twitter intelligence analysis
    bytedance ByteDance-HIDS is a Cloud-Native Host-Based Intrusion Detection solution project to provide next-generation Threat Detection and Behavior Audition with modern architecture.
    bluejoe2008 writer for spring IOC beans files
    studyzy A lightweight IoC dependency injection container for Golang
    santosomar A Simple Log4j Indicator of Compromise Linux Detector
    Share this repo

    Related Repos


    Security related res
    4
    CVE-2021-32099 SQLi allow attacker bypass login. From HTB with love
    l3eol3eo CVE-2021-32099 SQLi Bypass login Useful when trying to read User Flag on Pandora.htb CVE-2021-32099 SQLi allow attacker bypass login. Target Exploit o
     
    Security related res
    291
    HTTP Protocol Stack Remote Code Execution Vulnerability CVE-2022-21907
    antx-code CVE-2022-21907 Description POC for CVE-2022-21907: HTTP Protocol Stack Remote Code Execution Vulnerability. create by antx at 2022-01-17. Detail HTTP
     
    Security related res
    40
    Proof of concept of CVE-2022-21907 Double Free in http.sys driver, triggering a kernel cra...
    p0dalirius CVE-2022-21907 - Double Free in http.sys driver Summary An unauthenticated attacker can send an HTTP request with an "Accept-Encoding" HTTP request he
     
    Security related res
    8
    Methods & Tools for Mobile Malware Spyware & Forensics
    jonathandata1 Mobile & IOT Malware, Spyware, & Forensic Analysis Author: Jonathan Scott Twitter: @jonathandata1 Version 1.0 This repository contains methods, and to
     
    Security related res
    4
    Android Hacking Method 2022
    attakercyebr Program Features - ๐Ÿ“Œ Hack all Android phones. - ๐Ÿ“Œ Failure to detect antivirus. - ๐Ÿ“Œ Superior encryption - ๐Ÿ“Œ Source provided - ๐Ÿ“Œ 100 ูช FUD - ๐Ÿ“Œ It
     
    Security related res
    4
    Fast and easy way to rollout on multiple GitLab project file a particular content.
    Lujeni Volatile Fast and easy way to rollout on multiple GitLab project file a particular content. Why ? After looking for a tool to simply enforce a develop
     
    Security related res
    3
    Ultimate phishing tool ,A beginners friendly, Automated phishing tool in python. Author is...
    kumarvicku ๐Ÿ…ผ๐Ÿ…ฐ๐Ÿ…ณ๐Ÿ…ด ๐Ÿ††๐Ÿ…ธ๐Ÿ†ƒ๐Ÿ…ท ๐Ÿ…ฟ ๐Ÿ†ˆ๐Ÿ†ƒ๐Ÿ…ท๐Ÿ…พ๐Ÿ…ฝ ๐Ÿ†… ๐Ÿ…ฟ ๐Ÿ…ท๐Ÿ…ธ๐Ÿ†‚๐Ÿ…ท๐Ÿ…ด๐Ÿ† [+] ๐•ฏ๐–Š๐–˜๐–ˆ๐–—๐–Ž๐–•๐–™๐–Ž๐–”๐–“ : Ultimate phishing tool ,A beginners friendly, Automated phishing tool
     
    Security related res
    47
    A list of open source web security scanners
    psiinon open-source-web-scanners A list of open source web security scanners on GitHub. General Purpose Web Scanners Main Site Last Commit Committers Stars Ar
     
    Security related res
    9
    This is a Password database I made for myself, as I want to keep all my passwords in the s...
    vapen-hem This is a Password database I made for myself, as I want to keep all my passwords in the same place. but still protected, shall anyone get access to the file. And so I made this simple password database, that can encrypt, decrypt files, and generate Passwords, pin codes, and encryption keys. It took me about 4 - 6 months to make (Total I spent like 2 - 3 making it, but there were a lot of times where I did not work on the program) It is not 100% fine-tuned, but it works very well as is.
     
    Security related res
    292
    Cuckoo 3 is a Python 3 open source automated malware analysis system.
    cert-ee Cuckoo 3 Cuckoo 3 is a Python 3 open source automated malware analysis system. For setup instructions, please refer to our documentation. This is a de
     
    Security related res
    30
    Useful resources about phishing email analysis
    LetsDefend Phishing Email Analysis Useful tools MX Lookup Online URL/Attachment Analysis Tools AnyRun Browserling Hybrid Analysis urlscan Reputation Check Virust
     
    Security related res
    13
    A small script I made that takes any standard Decklist of magic the gathering cards and pu...
    izzitmichaela README This small script takes any decklist from an MTGO list and pulls all card images as jpg or png files into your directory. If you like this pr
     
    Security related res
    6
    Automated tool to find & created Exploit Poc for Clickjacking Vulnerability
    Raiders0786 ClickJackPoc This tool will help you automate finding Clickjacking Vulnerability by just passing a file containing list of Targets . Once the Target i
     
    Security related res
    4
    A passive-recon tool that parses through found assets and interacts with the Hackerone API...
    elbee-cyber Hackerone Passive Recon Tool A passive-recon tool that parses through found assets and interacts with the Hackerone API. Setup Simply run setup.sh to
     
    Security related res
    7
    Exploiting CVE-2021-44228 in VMWare Horizon for remote code execution and more.
    puzzlepeaches Log4jHorizon Exploiting CVE-2021-44228 in VMWare Horizon for remote code execution and more. Crossing the Log4j Horizon - A Vulnerability With No Retu