drovorub-hunt
insane-forensics/drovorub-huntA tool to assist with network-based hunting for GRU's Drovorub malware c2
incident-responseintrusion-detectionmalware-analysis+3
insane-forensics/drovorub-huntA tool to assist with network-based hunting for GRU's Drovorub malware c2
jstrosch/malware-samplesMalware samples, analysis exercises and other interesting resources.
ahmed-tarek22752/rce-cve-2017-0199-detection-analysisThis repository contains a full blue-team malware analysis of a real malicious DOCX exploiting CVE-2017-0199. The lab includes sandbox execution,…
stamparm/maltrailReal-time malicious traffic detection system using public blacklists, static malware trails, and heuristic analysis to identify threats across DNS,…
tomchop/malcomMalcom - Malware Communications Analyzer
nao-sec/ramnit_traffic_parserParsing Ramnit's traffic
omriher/captipperMalicious HTTP traffic explorer
basitsajidapply-stack/soc-investigation-cve-2024-49138Investigation and Incident Response report for LetsDefend Alert SOC335 (CVE-2024-49138 Exploitation)
corelight/zeek-netsupport-detectorA Zeek based NetSupport detector. NetSupport is often abused by attackers in malware.
blackoclock/xls-to-dbatloader-or-guloader-for-agenttesla-variantCVE-2017-0199 XLS --> HTA --> VBS --> STEGANOGRAPHY --> DBATLOADER/GULOADER STYLE MALWARE