ioc-finder
fhightower/ioc-finderSimple, effective, and modular package for parsing observables (indicators of compromise (IOCs), network data, and other, security related…
ioc-managementmalware-analysisthreat-intelligence+1
183
fhightower/ioc-finderSimple, effective, and modular package for parsing observables (indicators of compromise (IOCs), network data, and other, security related…
mnrkbys/norimaciLightweight macOS malware analysis sandbox that monitors system activity via OpenBSM or Monitor.app, generating detailed reports and timelines of…
danigil/neupermZero-retraining sanitization that reorders permutation-equivalent neural network units to destroy malware embedded via weight-steganography attacks…
ahmed-tarek22752/security-vulnerability-in-microsoft-office.Blue-team analysis of a malicious DOCX exploiting CVE-2017-0199, covering sandbox detonation, network forensics, IOC extraction, MITRE ATT&CK…
corelight/pingbackA Zeek package to detect the Pingback malware ICMP tunnel command and control (C2) network traffic.
netomize/http-basmaIn the realm of cybersecurity, accurately identifying and characterizing web servers is crucial for threat detection, vulnerability assessment, and…
emanuele-f/pcapdroidNo-root network monitor, firewall and PCAP dumper for Android
withsecurelabs/doublepulsar-detection-scriptA python2 script for sweeping a network to find windows systems compromised with the DOUBLEPULSAR implant.
pjlantz/droidboxDynamic analysis sandbox for Android apps that monitors network traffic, file operations, cryptographic API usage, permission circumvention, and…
naacbin/covenantdecryptorDecrypts Covenant C2 communications by extracting RSA private keys from minidumps, recovering AES session keys, and converting network captures to…
buter-chkalova/rvbbit-arsenalOffensive & defensive Linux kernel security research focused on rootkit behavior, observable artifacts and detection.
maximilianfeix/hexveroKnow what changed inside your Electron release: diff two builds for IPC, preload, windows, fuses and hosts, with file:line. CLI, CI gate, MCP server.
abc1230940/soc336-windows-ole-zero-click-rce-exploitation-detected-cve-2025-21298SOC336 - Windows OLE Zero-Click RCE Exploitation Detected (CVE-2025-21298) Walkthrough
opposum0112/cusimanseComposable research-contract and YAML-recipe framework for agent-operated security experiments on disposable compute
gendigitalinc/iocThreat Intel IoCs + bits and pieces of dark matter. Published by Gen Threat Labs.
xephora/threat-remediation-scriptsThis repository contains a list of new remediation scripts.
pedramamini/iocextractDefanged Indicator of Compromise (IOC) Extractor.
a3sal0n/falcongateOpen-source network gateway firewall that detects and blocks malware, ransomware, and intrusions using Zeek, VirusTotal, and threat intelligence…