intelligence
ctrlaltint3l/intelligenceCentralized repository for malware samples, threat intelligence, IOCs, and security tooling logs to support threat research and incident response…
forensicsinformation-gatheringioc-management+3
57
ctrlaltint3l/intelligenceCentralized repository for malware samples, threat intelligence, IOCs, and security tooling logs to support threat research and incident response…
elastic/labs-releasesElastic Security Labs releases
toborrm9/malicious_extension_sentryMalicious Extension Database
sifalcon/detectionCurated collection of detection rules and IOCs extracted from DFIR engagements and malware analyses to support threat hunting, incident response, and…
synacktiv/krustyloader-analysisKrustyLoader Analysis
bert-janp/open-source-threat-intel-feedsThis repository contains Open Source freely usable Threat Intel feeds that can be used without additional requirements. Contains multiple types such…
prodaft/malware-iocThis repository contains indicators of compromise (IOCs) of our various investigations.
mthcht/awesome-listsCurated repository of threat intelligence feeds, IoC lists, YARA rules, and DFIR tool references for SOC/CERT/CTI detection and incident response.
akamai/akamai-security-researchThis repository includes code and IoCs that are the product of research done in Akamai's various security research teams.
threatlabz/iocsThis repository is for Indicators of Compromise (IOCs) from Zscaler ThreatLabz public reports
essexrich/threatactors-ttpsRepository created to share information about tactics, techniques and procedures used by threat actors. Initially with ransomware groups and evolving…
archanchoudhury/msdt_cve-2022-30190This Repository Talks about the Follina MSDT from Defender Perspective
synacktiv/synacktiv-rulesPublic repository of Sigma and YARA rules created by Synacktiv
infostealers-stats/credential-and-breach-monitoringThis repository provides a practical comparison of breach intelligence, dark web monitoring, and identity exposure services, with a focus on factors…
0xsyr0/log4shellThis repository contains all gathered resources we used during our Incident Reponse on CVE-2021-44228 and CVE-2021-45046 aka Log4Shell.
ma1am/cve-2022-26134-exploit-detectionThis repository contains Yara rule and the method that a security investigator may want to use for CVE-2022-26134 threat hunting on their Linux…
b401/clickstudio-compromised-certificateRepository containing the compromised certificate seen in recent CVE-2022-30190 (Follina) attacks.
zedocun/soc-investigation-powershell-edrfreezeSOC investigation of CVE-2024-49138 exploitation alert involving PowerShell, EDRFreeze execution, and defense evasion behavior in a simulated…