
Archived
ioccheck
A tool for simplifying the process of researching IOCs.
defensive-toolshash-analysisinformation-gathering+3
25

Sigma rule for detecting exploitation of CVE-2022-30190 (Follina) via Windows process creation events, enabling SOC teams to identify malicious…

Full static & memory analysis of Overlord RAT: Go agent architecture, HTTP/2 + WebSocket C2, reflective DLL injection, browser keylogging, and IOCs.…

Moneta is a live usermode memory analysis tool for Windows with the capability to detect malware IOCs

Scan files or process memory for CobaltStrike beacons and parse their configuration

CarbonBlack hunting queries to detect PrintNightmare (CVE-2021-1675) exploitation via file, module load, and process events, based on Sigma rules.