Yara Rules Project
A repository of Yara signatures under the GNU-GPLv2 license for the cybersecurity community.
The SSL Blacklist (SSLBL) is a project of abuse.ch that detects malicious SSL connections by identifying and blacklisting SSL certificates used by botnet C&C servers. It also identifies JA3 fingerprints to detect and block malware botnet C&C communication on the TCP layer. The platform provides a list of malicious SSL certificates, JA3 fingerprints, and statistics on botnet C&C operations that leverage SSL to encrypt botnet C&C traffic. The platform offers several features, including: * Identifying botnet command and control (C&C) infrastructure * Detecting botnet C&C communication * Providing insights into botnet C&C operations that leverage SSL to encrypt botnet C&C traffic
A repository of Yara signatures under the GNU-GPLv2 license for the cybersecurity community.
BotScout.com provides proactive bot detection, screening, and banning through a powerful API.
A library of Amazon S3 attack scenarios with mitigation strategies.
Repository of YARA rules for identifying and classifying malware.
Taxii2 server for interacting with taxii services.
Dataplane.org is a nonprofit organization providing free data, tools, and analysis to increase awareness of Internet trends, anomalies, threats, and misconfigurations.