kaandemir993/agent-tesla-apc-injection-token-manipulation-registry-persistence-analysis"Reverse engineering analysis of Agent Tesla, a .NET-based info-stealer that uses APC injection, token manipulation, and registry persistence.…
volexity/threat-intelSignatures and IoCs from public Volexity blog posts.
sophoslabs/iocsSophos-originated indicators-of-compromise from published reports
akamai/akamai-security-researchThis repository includes code and IoCs that are the product of research done in Akamai's various security research teams.
gendigitalinc/iocA continuously updated collection of threat intelligence indicators of compromise (IOCs), including YARA rules, for detecting and tracking malware…
fhightower/ioc-finderPython library for extracting Indicators of Compromise, URLs, IP addresses, hashes, and email addresses from text using declarative grammars instead…
prodaft/malware-iocThis repository contains indicators of compromise (IOCs) of our various investigations.
curated-intel/ukraine-cyber-operationsCurated Intelligence is working with analysts from around the world to provide useful information to organisations in Ukraine looking for additional…
pandare9x/malwareIOCs and notes related to malware
elastic/labs-releasesElastic Security Labs releases
embee-research/agenttesla-config-extractorConfig extractor for AgentTesla - Discord/Telegram Variant
nccgroup/mimikatz-detector-busylightUSB HID driver emulation with PID/VID (0x3bca/0x27bb) of Plenom A/S Busylight Alpha, that is supported by Mimikatz. When mimikatz is executed, a…
synacktiv/hexalocker-analysisHexaLocker ransomware analysis
synacktiv/krustyloader-analysisKrustyLoader Analysis
synacktiv/synacktiv-rulesPublic repository of Sigma and YARA rules created by Synacktiv
