Loki - Simple IOC and YARA Scanner
- python
- yara
- signature
- scanner
47,133 repositories indexed
1–19 of 19 · Most stars
Loki - Simple IOC and YARA Scanner
Indicators of Compromises (IOC) of our various investigations
Zero Breach — local, read-only scanner that checks a computer for indicators of the AdFection / Candiru ad-delivered spyware campaign. No network, no admin, no dependencies.
IntelMQ is a solution for IT security teams for collecting and processing security feeds using a message queuing protocol.
Multi-Packer wrapper letting us daisy-chain various packers, obfuscators and other Red Team oriented weaponry. Featured with artifacts watermarking, IOCs collection & PE Backdooring. You feed it with your implant, it does a lot of sneaky things and spits out obfuscated executable.
Extract and aggregate threat intelligence.
Simple Bash IOC Scanner
Defanged Indicator of Compromise (IOC) Extractor.
Endpoint detection for Windows, Linux, and macOS. Sigma, YARA, and IOC rules on native telemetry. Written in Rust. No cloud account required.
Collecting & Hunting for IOCs with gusto and style
The fastest communications possible. Delphi rulez.
simple YARA-based IOC scanner
Malware/IOC ingestion and processing engine
🪓 High-Speed Log Analysis & Forensics Tool - Part of NullSec Toolkit
ThreatTracker is a Python script designed to monitor and generate alerts on given sets of indicators of compromise (IOCs) indexed by a set of Google Custom Search Engines.
Create dataset for suricata with indicators of MISP instances and add sightings in MISP if an indicator of dataset generates an alert
Self-hosted AI-assisted CTI-to-detection workbench for ATT&CK mapping, IOC/CVE intelligence, Threat Radar, malware triage, Attack Simulation, and SIEM validation.
High-performance network library for D programming language, event-driven asynchonous implemention(IOCP / kqueue / epoll).
Python OpenIOC Editor