Click here to download all references as Bib-File.•

Enter keywords to filter the library entries below or Propose new Entry
2021-02-17 ⋅ cyber00011011.github.io ⋅ Cyber_00011011
Understand Shellcode with CyberChef
2021-02-01 ⋅ pkb1s.github.io ⋅ Petros Koutroumpis
Relay Attacks via Cobalt Strike Beacons
Cobalt Strike
2021-01-31 ⋅ s3cur3th1ssh1t.github.io ⋅ Fabian Mosch
A tale of EDR bypass methods
2021-01-22 ⋅ Github (Finch4) ⋅ Finch
Malware Analysis Report No2
BitRAT
2021-01-19 ⋅ Github (fireeye) ⋅ FireEye
Mandiant Azure AD Investigator: Focusing on UNC2452 TTPs
SUNBURST
2021-01-13 ⋅ Github (Mave12) ⋅ Mave12
Github Repository: BlackNET 3.7.0.1
BlackNET RAT
2021-01-09 ⋅ Github (f0wl) ⋅ Marius Genheimer
ezuri_unpack
2021-01-07 ⋅ Github (hvs-consulting) ⋅ HvS-Consulting AG
Lazarus / APT37 IOCs
Lazarus Group
2021-01-06 ⋅ Github (SentinelLabs) ⋅ SentinelLabs
SolarWinds_Countermeasures
SUNBURST
2021-01-01 ⋅ ⋅ Github (WBGlIl) ⋅ WBGlIl
A book on cobaltstrike
Cobalt Strike
2020-12-27 ⋅ Github (arsium) ⋅ arsium
HorusEyesRat
HorusEyes RAT
2020-12-21 ⋅ US Court of Appeals for the Ninth Court ⋅ Cisco, Github, Google, Internet Association, LinkedIn, Microsoft, VMWare, WhatsApp
Case: 20-16408: WhatsApp et al. vs NSO Group
2020-12-16 ⋅ Github (RedDrip7) ⋅ RedDrip7
A script to decode SUNBURST DGA domain
SUNBURST
2020-12-15 ⋅ Github (itsreallynick) ⋅ Nick Carr
A quick note from Nick Carr on COSMICGALE and SUPERNOVA that those are unrelated to UC2452 intrusion campaign
SUPERNOVA
2020-12-15 ⋅ Github (Dump-GUY) ⋅ Jiří Vinopal
Reverse engineering KPOT v2.0 Stealer
KPOT Stealer
2020-12-15 ⋅ Github (sophos-cybersecurity) ⋅ Sophos Cyber Security Team
solarwinds-threathunt
Cobalt Strike SUNBURST
2020-12-13 ⋅ Github (fireeye) ⋅ FireEye
SUNBURST Countermeasures
SUNBURST SUPERNOVA TEARDROP UNC2452
2020-12-12 ⋅ Github (cdong1012) ⋅ Chuong Dong
ContiUnpacker: An automatic unpacker for Conti rasnomware
Conti
2020-12-09 ⋅ Github (fireeye) ⋅ FireEye
Fireeye RED TEAM tool countermeasures
2020-11-09 ⋅ Trend Micro ⋅ Zhengyu Dong
An Old Joker’s New Tricks: Using Github To Hide Its Payload
Joker