Ryan Stillions: On TTPs
Ryan Stillions: On TTPs is a blog that provides insights and analysis on tactics, techniques, and procedures (TTPs) used by threat actors. It offers in-depth analysis of real-world attacks and provides actionable intelligence to help defenders improve their detection and response capabilities. The blog covers various topics, including malware, phishing, and social engineering, and provides practical advice on how to stay ahead of emerging threats. Ryan Stillions: On TTPs is a valuable resource for security professionals, incident responders, and anyone interested in staying up-to-date on the latest threat trends and tactics.
FEATURES
ALTERNATIVES
Tools to export data from MISP MySQL database for post-incident analysis and correlation.
LOKI is a simple IOC and YARA Scanner for Indicators of Compromise Detection.
Provides indicators of compromise (IOCs) to combat malware with Yara and Snort rules.
Repository with projects for photo and video hashing, content moderation, and signal exchange.
A visualization tool for threat analysis that organizes APT campaign information and visualizes relations of IOC.
A library of event-based analytics written in EQL to detect adversary behaviors, now integrated into the Detection Engine of Kibana.
yarAnalyzer creates statistics on a yara rule set and files in a sample directory, generating tables and CSV files, including an inventory feature.
PINNED
ImmuniWeb® Discovery
ImmuniWeb Discovery is an attack surface management platform that continuously monitors an organization's external digital assets for security vulnerabilities, misconfigurations, and threats across domains, applications, cloud resources, and the dark web.
InfoSecHired
An AI-powered career platform that automates the creation of cybersecurity job application materials and provides company-specific insights for job seekers.
Mandos Brief Newsletter
A weekly newsletter providing cybersecurity leadership insights, industry updates, and strategic guidance for security professionals advancing to management positions.
Checkmarx SCA
A software composition analysis tool that identifies vulnerabilities, malicious code, and license risks in open source dependencies throughout the software development lifecycle.
Check Point CloudGuard WAF
A cloud-native web application and API security solution that uses contextual AI to protect against known and zero-day threats without signature-based detection.
Orca Security
A cloud-native application protection platform that provides agentless security monitoring, vulnerability management, and compliance capabilities across multi-cloud environments.
DryRun
A GitHub application that performs automated security code reviews by analyzing contextual security aspects of code changes during pull requests.
Wiz
Wiz Cloud Security Platform is a cloud-native security platform that enables security, dev, and devops to work together in a self-service model, detecting and preventing cloud security threats in real-time.