DailyIOC
Daily IOC from articles, tweets for archives 2020-03-17 - IOC of the backdoors connections with APT2 - APT10 founded by Vishnyak0v - Ref tweet 2020-03-09 - IOC of APT-C-23 founded by Rmy_Reserve 2020-02-16 - Release of all IOC founded for windows/linux gamaredon samples since April 2019 2020-02-14 - Dridex samples from the new campaign of TA505 (thanks to JAMESWT) 2020-02-12 - Intelligence operation against targets in Indonesia (thanks to LAB52) - Article here 2020-02-12 - Beta results of the Yara hits monitoring from Thor 2020-02-10 - Update spotted FastLoader samples 2020-02-09 - APT Transparent Tribe (thanks to _re_fox) 2020-02-05 - APT Patchwork (thanks to JAMESWT) This is a daily collection of IOCs from various sources, including articles and tweets.
FEATURES
SIMILAR TOOLS
API for querying domain security information, categorization, and related data.
A PowerShell script to interact with the MITRE ATT&CK Framework via its own API using the deprecated MediaWiki API.
LOKI is a simple IOC and YARA Scanner for Indicators of Compromise Detection.
A parsing tool for Yara Scan Service's JSON output file to help maximize benefits and automate parsing of Yara Scan Service results.
SeaSponge is an accessible web-based threat modeling tool with a focus on accessibility, aesthetics, and intuitive user experience.
VirusTotal API v3 is a threat intelligence platform for scanning files, URLs, and IP addresses, and retrieving reports on threat reputation and context.
Unified repository for Microsoft Sentinel and Microsoft 365 Defender containing security content, detections, queries, playbooks, and resources to secure environments and hunt for threats.
A threat hunting tool for Windows event logs to detect APT movements and decrease the time to uncover suspicious activity.
PINNED
Mandos
Fractional CISO service that helps B2B companies implement security leadership to win enterprise deals, achieve compliance, and develop strategic security programs.
Checkmarx SCA
A software composition analysis tool that identifies vulnerabilities, malicious code, and license risks in open source dependencies throughout the software development lifecycle.
Orca Security
A cloud-native application protection platform that provides agentless security monitoring, vulnerability management, and compliance capabilities across multi-cloud environments.
DryRun
A GitHub application that performs automated security code reviews by analyzing contextual security aspects of code changes during pull requests.