FireEye IOCs
0 (0)
Repository of IOCs provided under the Apache 2.0 license
msticpy is a library for InfoSec investigation and hunting in Jupyter Notebooks. It includes functionality to: - Query log data from multiple sources - Enrich the data with Threat Intelligence, geolocations and Azure resource data - Extract Indicators of Activity (IoA) from logs and unpack encoded data - Perform sophisticated analysis such as anomalous session detection and time series decomposition - Visualize data using interactive timelines, process trees and multi-dimensional Morph Charts - Includes time-saving notebook tools such as widgets to set query time boundaries, select and display items from lists, and configure the notebook environment. - Initially developed to support Jupyter Notebooks authoring for Azure Sentinel, now extended to pull log data from other sources.
Repository of IOCs provided under the Apache 2.0 license
Taxii2 server for interacting with taxii services.
VirusTotal API v3 is a threat intelligence platform for scanning files, URLs, and IP addresses, and retrieving reports on threat reputation and context.
A robust Python implementation of TAXII Services with a friendly pythonic API.
Python APIs for serializing and de-serializing STIX2 JSON content with higher-level APIs for common tasks.
A Splunk app mapped to MITRE ATT&CK to guide threat hunts.