Click here to download all references as Bib-File.•

Enter keywords to filter the library entries below or Propose new Entry
2021-03-18 ⋅ Github (lacework) ⋅ lacework-labs
DGA and decoder scripts for n3cr0morph IRC malware
N3Cr0m0rPh
2021-03-18 ⋅ Github (cisagov) ⋅ CISA
CISA Hunt and Incident Response Program (CHIRP)
SUNBURST
2021-03-06 ⋅ Github (microsoft) ⋅ Microsoft
Security scripts
HAFNIUM
2021-03-05 ⋅ Github (cert-lv) ⋅ Andrew Konst
Detect webshells dropped on Microsoft Exchange servers after 0day compromises
HAFNIUM
2021-03-02 ⋅ Github (microsoft) ⋅ Microsoft
Microsoft-365-Defender-Hunting-Queries for hunting Gootkit malware delivery and C2
GootKit
2021-02-24 ⋅ Github (AmnestyTech) ⋅ Amnesty International
Overview of Ocean Lotus Samples used to target Vietnamese Human Rights Defenders
OceanLotus Cobalt Strike KerrDown
2021-02-19 ⋅ K7 Security ⋅ Partheeban J
GitHub – Home to AsyncRAT Backdoor
AsyncRAT
2021-02-17 ⋅ cyber00011011.github.io ⋅ Cyber_00011011
Understand Shellcode with CyberChef
2021-02-01 ⋅ pkb1s.github.io ⋅ Petros Koutroumpis
Relay Attacks via Cobalt Strike Beacons
Cobalt Strike
2021-01-31 ⋅ s3cur3th1ssh1t.github.io ⋅ Fabian Mosch
A tale of EDR bypass methods
2021-01-22 ⋅ Github (Finch4) ⋅ Finch
Malware Analysis Report No2
BitRAT
2021-01-19 ⋅ Github (fireeye) ⋅ FireEye
Mandiant Azure AD Investigator: Focusing on UNC2452 TTPs
SUNBURST
2021-01-13 ⋅ Github (Mave12) ⋅ Mave12
Github Repository: BlackNET 3.7.0.1
BlackNET RAT
2021-01-09 ⋅ Github (f0wl) ⋅ Marius Genheimer
ezuri_unpack
2021-01-07 ⋅ Github (hvs-consulting) ⋅ HvS-Consulting AG
Lazarus / APT37 IOCs
Lazarus Group
2021-01-06 ⋅ Github (SentinelLabs) ⋅ SentinelLabs
SolarWinds_Countermeasures
SUNBURST
2021-01-01 ⋅ ⋅ Github (WBGlIl) ⋅ WBGlIl
A book on cobaltstrike
Cobalt Strike
2020-12-27 ⋅ Github (arsium) ⋅ arsium
HorusEyesRat
HorusEyes RAT
2020-12-21 ⋅ US Court of Appeals for the Ninth Court ⋅ Cisco, Github, Google, Internet Association, LinkedIn, Microsoft, VMWare, WhatsApp
Case: 20-16408: WhatsApp et al. vs NSO Group
2020-12-16 ⋅ Github (RedDrip7) ⋅ RedDrip7
A script to decode SUNBURST DGA domain
SUNBURST