
drovorub-hunt
A tool to assist with network-based hunting for GRU's Drovorub malware c2
incident-responseintrusion-detectionmalware-analysis+3
25

A tool to assist with network-based hunting for GRU's Drovorub malware c2

Encrypted peer-to-peer mesh VPN for remote mobile forensics, enabling wireless ADB and libimobiledevice acquisition, network monitoring, and…


A Zeek package to detect the Pingback malware ICMP tunnel command and control (C2) network traffic.