Click here to download all references as Bib-File.•

Enter keywords to filter the library entries below or Propose new Entry
2020-08-31 ⋅ Github (ics-iot-bootcamp) ⋅ Ali Rıza Şahinkaya, Can Atakan Işık, Rıdvan Ethem Canavar
Cerberus Banking Trojan Research
Cerberus
2020-08-23 ⋅ Github (Insane-Forensics) ⋅ Insane-Forensics
Dispatches from Drovorub: Network Threat Hunting for Russia GRU GTsSS' Malware at Scale
2020-08-19 ⋅ Github (lgandx) ⋅ Laurent Gaffie
Responder/MultiRelay
Responder
2020-08-05 ⋅ Github (mauronz) ⋅ Francesco Muroni
Emotet API+string deobfuscator (v0.1)
Emotet
2020-07-22 ⋅ Github (hausec) ⋅ Ryan Hausknecht
Github Repository for PowerZure
PowerZure
2020-07-22 ⋅ SUCURI ⋅ Denis Sinegubko
Skimmers in Images & GitHub Repos
magecart
2020-07-13 ⋅ Github (1d8) ⋅ 1d8
Remcos RAT Macro Dropper Doc
Remcos
2020-07-10 ⋅ Github (eset) ⋅ Matías Porolli
Evilnum — Indicators of Compromise
EVILNUM More_eggs EVILNUM TerraStealer
2020-07-09 ⋅ Github (krautface) ⋅ krautface
Gist with observed grelos skimmer
grelos
2020-06-30 ⋅ Github (elastic) ⋅ Elastic
Detection Rules by Elastic
2020-06-26 ⋅ Github (Bleeping) ⋅ Lawrence Abrams
Ransom .exx notes
RansomEXX
2020-06-25 ⋅ Github (7h3w4lk3r) ⋅ The Walker
Github Repository of PYBACK
pyback
2020-06-22 ⋅ Github (StrangerealIntel) ⋅ Twitter (@Arkbird_SOLG)
FTcode targets European countries
FTCODE
2020-06-17 ⋅ Github (f0wl) ⋅ Marius Genheimer
deICEr: A Go tool for extracting config from IcedID second stage Loaders
IcedID
2020-06-09 ⋅ Github (citizenlab) ⋅ CitizenLab
Dark Basin Indicators of Compromise
Dark Basin
2020-06-09 ⋅ Github (Sentinel-One) ⋅ Gal Kristal
CobaltStrikeParser
Cobalt Strike
2020-06-05 ⋅ ⋅ NSFOCUS ⋅ NSFOCUS
供应链攻击事件——针对Github中Java项目的定向攻击
Octopus Scanner
2020-06-05 ⋅ Github (DanusMinimus) ⋅ Dan Lisichkin
Zero2Auto - Netwalker Walk through
Mailto
2020-05-28 ⋅ Github Security Lab ⋅ Alvaro Muñoz
The Octopus Scanner Malware: Attacking the open source supply chain
Octopus Scanner
2020-05-18 ⋅ Github (dlegezo) ⋅ Denis Legezo
Microcin Decryptor
Microcin