
scambuster
Defensive engagement & threat intelligence research laboratory. Converts inbound scam emails into actionable IOCs through controlled, policy-driven…

Defensive engagement & threat intelligence research laboratory. Converts inbound scam emails into actionable IOCs through controlled, policy-driven…


This repository includes code and IoCs that are the product of research done in Akamai's various security research teams.

Curated Indicators of Compromise and YARA rules from Zscaler ThreatLabz public reports for threat hunting, malware research, and detection…

Detects shadow-administrator accounts in WordPress via configurable indicators and heuristics, then removes selected accounts through guarded, logged…

A collection of scripts for processing network forensics type data and intelligence, mainly into a postgres database.

A Python library for handling TAXII Messages invoking TAXII Services.

HexaLocker ransomware analysis

KrustyLoader Analysis

Reproducible SOC lab for CVE-2024-4577 detection and response

Curated repository of threat intelligence feeds, IoC lists, YARA rules, and DFIR tool references for SOC/CERT/CTI detection and incident response.

CVE-2026-52813 (Gogs Path Traversal → Git Hooks RCE) defensive writeup: root-cause & patch analysis, Sigma/SIEM detection rules, IOCs, non-intrusive…

ioc2rpz is a place where threat intelligence meets DNS.

CVE-2021-3441 CVE Check is a python script to search targets for indicators of compromise to CVE-2021-3441

Repo containing all info, scripts, etc. related to CVE-2021-44228


Detection, analysis, and response strategies for CVE-2024-3400 exploitation attempts targeting Palo Alto PAN-OS GlobalProtect portals. Includes IOCs,…

Analysis, detection, and mitigation of CVE-2023-20198 exploitation in Cisco IOS XE – QUB CSC3064 Network Security Assessment