
ThreatActors-TTPs
Repository created to share information about tactics, techniques and procedures used by threat actors. Initially with ransomware groups and evolving…

Repository created to share information about tactics, techniques and procedures used by threat actors. Initially with ransomware groups and evolving…

This repository contains indicators of compromise (IOCs) of our various investigations.

An strace-like program for the Windows 'native' API

MAPS cloud scanner and response parser for Microsoft Defender research.

An API hooking framework for intercepting and monitoring Windows applications

Automated supply chain security monitor that polls PyPI and npm registries, diffs new releases against predecessors, and uses LLM analysis to detect…

Django application that performs SAST and Malware Analysis for Android APKs