Spyre
A simple, self-contained modular host-based IOC scanner for incident responders.
Mirai Tracker is a cybersecurity tool that detects and logs SYN packets with a specific signature generated by the Mirai malware. The tracker analyzes SYN packets with a TTL value of 64, a random TCP window size, and a TCP sequence number corresponding to the integer value of the IP destination. The tool is based in Europe and provides real-time information on Mirai-based campaigns. It also offers a solution using SCAPY to detect these packets. The tracker includes additional features such as IP list, SQLite DB, and maps to help correlate Mirai variant recognition. It is an essential resource for cybersecurity professionals and researchers tracking Mirai-related activities. The tool is regularly updated to track the evolution of Mirai-based campaigns, providing valuable insights into the malware's behavior and helping to improve detection and mitigation strategies.
A simple, self-contained modular host-based IOC scanner for incident responders.
Forager is a threat intelligence tool that simplifies the retrieval, storage, and maintenance of threat data with a user-friendly interface and support for various data sources.
Packet Storm is a global security resource providing around-the-clock information and tools to mitigate personal data and fiscal loss on a global scale.
Repository of Yara signatures for detecting targeted attacks on civil society organizations
A collection of tools and resources for threat hunters.
Pulsedive is a threat intelligence platform that provides frictionless threat intelligence for growing teams, offering features such as indicator enrichment, threat research, and API integration.