#1Tools for managing, sharing, and integrating Indicators of Compromise (IOCs) into security defenses.
Kitploit recommended
l4r1k/citrixnetscaleranalysis🔬 Jupyter notebook to help automate some of the forensic analysis related to Citrix Netscalers compromised via CVE-2019-19781
onsec-fr/cve-2019-19781-forensicAutomated forensic script hunting for cve-2019-19781
digitalshadows/cve-2019-19781_iocsCurated indicators of compromise (IOCs) for CVE-2019-19781, including IP addresses and whois data from honeypot logs to aid threat detection and…
biggiesmallsag/nighthawkresponseIncident Response Forensic Framework
silascutler/malpipeMalware/IOC ingestion and processing engine
abhinavbom/threat-intelligence-hunterTIH is an intelligence tool that helps you in searching for IOCs across multiple openly available security feeds and some well known APIs. The idea…
navytitanium/eitest-tools-scripts-iocsIOC feed and analysis toolkit for EITest campaigns, featuring C2 data decryption, victim payload decoding, and sinkhole log processing for threat…
r3mrum/loki-parseA python script that can detect and parse loki-bot (malware) related network traffic. This script can be helpful to DFIR analysts and security…
nccgroup/mortimerA collection of scripts for processing network forensics type data and intelligence, mainly into a postgres database.
