Daily IOC from articles, tweets for archives 2020-03-17 - IOC of the backdoors connections with APT2 - APT10 founded by Vishnyak0v - Ref tweet 2020-03-09 - IOC of APT-C-23 founded by Rmy_Reserve 2020-02-16 - Release of all IOC founded for windows/linux gamaredon samples since April 2019 2020-02-14 - Dridex samples from the new campaign of TA505 (thanks to JAMESWT) 2020-02-12 - Intelligence operation against targets in Indonesia (thanks to LAB52) - Article here 2020-02-12 - Beta results of the Yara hits monitoring from Thor 2020-02-10 - Update spotted FastLoader samples 2020-02-09 - APT Transparent Tribe (thanks to _re_fox) 2020-02-05 - APT Patchwork (thanks to JAMESWT) This is a daily collection of IOCs from various sources, including articles and tweets.
FEATURES
ALTERNATIVES
A tracker that detects and logs SYN packets with a specific signature generated by the Mirai malware, providing real-time information on Mirai-based campaigns.
Robust Python SDK and Command Line Client for interacting with IntelOwl's API.
Collection of YARA signatures from recent malware research.
Public access to Indicators of Compromise (IoCs) and other data for readers of Security Scorecard's technical blog posts and reports.
Proof-of-concept implementation of TAXII services for developers and non-developers.
FireEye Mandiant SunBurst Countermeasures: freely available rules for detecting malicious files and activity
In-depth threat intelligence reports and services providing insights into real-world intrusions, malware analysis, and threat briefs.
PINNED

Mandos Brief Newsletter
A weekly newsletter providing cybersecurity leadership insights, industry updates, and strategic guidance for security professionals advancing to management positions.

PTJunior
An AI-powered penetration testing platform that autonomously discovers, exploits, and documents vulnerabilities while generating NIST-compliant reports.

CTIChef.com Detection Feeds
A tiered cyber threat intelligence service providing detection rules from public repositories with varying levels of analysis, processing, and guidance for security teams.

ImmuniWeb® Discovery
ImmuniWeb Discovery is an attack surface management platform that continuously monitors an organization's external digital assets for security vulnerabilities, misconfigurations, and threats across domains, applications, cloud resources, and the dark web.

Checkmarx SCA
A software composition analysis tool that identifies vulnerabilities, malicious code, and license risks in open source dependencies throughout the software development lifecycle.

Orca Security
A cloud-native application protection platform that provides agentless security monitoring, vulnerability management, and compliance capabilities across multi-cloud environments.

DryRun
A GitHub application that performs automated security code reviews by analyzing contextual security aspects of code changes during pull requests.