
vulnrichment
A repo to conduct vulnerability enrichment.

A repo to conduct vulnerability enrichment.

Detects CVE-2026-45321 (TanStack supply chain compromise) and Mini Shai-Hulud worm artifacts. Scans node_modules, lockfiles, persistence hooks…

Live memory analysis detecting malware IOCs in processes, modules, handles, tokens, threads, .NET assemblies, memory address space and environment…

Look for un-sinkholed C&C IPs in your Bro logs (from Bambanek Consulting C&C master list)

The Art of Pivoting - Techniques for Intelligence Analysts to Discover New Relationships in a Complex World

CVE-2026-52813 (Gogs Path Traversal → Git Hooks RCE) defensive writeup: root-cause & patch analysis, Sigma/SIEM detection rules, IOCs, non-intrusive…

Extract useful information from PANOS support file for CVE-2024-3400

Run on your ManageEngine server

LetsDefend SOC lab investigating CVE-2024-49138 exploitation and related malicious activity.