NECOMA addresses the aspect of data collection, leveraging past and current work on the topic with the goal to expand these existing mechanisms and orient them towards threat data analysis. It also focuses on threat data analysis from the perspective of understanding attackers and vulnerabilities, as well as from the point of view of the target and victim, needing to protect itself in real-time and in the most efficient manner possible. Additionally, NECOMA aims to develop and demonstrate new cyberdefense mechanisms that leverage metrics for deployment and evaluation, analyzing both infrastructure (networks and large computing infrastructures) and endpoints (smartphones and browsers). The results of the NECOMA project will be showcased in demonstrators that highlight the innovations of the project and prepare exploitation.
A project that detects malicious SSL connections by identifying and blacklisting SSL certificates used by botnet C&C servers and identifying JA3 fingerprints to detect and block malware botnet C&C communication.
Gathers Threat Intelligence Feeds from publicly available sources and provides detailed output in CSV format.
A community-driven list of sample security analytics for auditing cloud usage and detecting threats in Google Cloud.
A set of rules for detecting threats in various formats, including Snort, Yara, ClamAV, and HXIOC.
Dorothy is a tool to test monitoring and detection capabilities for Okta environments, with modules mapped to MITRE ATT&CK® tactics.
HoneyDB is a honeypot-based threat intelligence platform that provides real-time insights into attacker behavior and malicious activity on networks.
yarAnalyzer creates statistics on a yara rule set and files in a sample directory, generating tables and CSV files, including an inventory feature.
A community-driven public malware repository providing access to malware samples, tools, and resources for the cybersecurity community.
An AI-powered career platform that automates the creation of cybersecurity job application materials and provides company-specific insights for job seekers.
Fabric Platform is a cybersecurity reporting solution that automates and standardizes report generation, offering a private-cloud platform, open-source tools, and community-supported templates.
Stay ahead in cybersecurity. Get the week's top cybersecurity news and insights in 8 minutes or less.
Wiz Cloud Security Platform is a cloud-native security platform that enables security, dev, and devops to work together in a self-service model, detecting and preventing cloud security threats in real-time.
A cybersecurity platform that offers vulnerability scanning, Windows Defender and 3rd party AV management, and MFA compliance reporting, among other features.
Adversa AI is a cybersecurity company that provides solutions for securing and hardening machine learning, artificial intelligence, and large language models against adversarial attacks, privacy issues, and safety incidents across various industries.