Threat Actor Profiles. Contribute to dalthunter/intel-reports development by creating an account on GitHub.

Internship task where I simulated a multi-stage APT — phishing, persistence, lateral movement, DNS tunnelling exfil — then switched to Blue Team and detected/investigated it using Security Onion, W...

Threat intelligence, reverse engineering, and detection content (YARA, Sigma, Suricata, YARA-L, KQL/SPL hunting) for Infy / Prince of Persia (APT-C-07) "Tornado v51" — Iranian Fou...

A plugin-based file analysis framework for Suricata file stores - DCSO/nightwatch

专业的 IP / 域名 / URL 地理位置 & 威胁情报查询 GUI 工具；Professional GUI tool for querying IP/domain/URL geolocation and threat intelligence - Samsepik9/IPGEO-Query

中文威胁情报→ATT&CK技术编号标注映射集：封闭词表可机器评分，检测工程上游，防御导向。WIP. Contribute to uninhibited-scholar/attack-bench-zh development by creating an account on GitHub.

暗网公开信息收集与威胁情报提取. Contribute to CierraRunnis/Dark-Web-Threat-Intelligence-System development by creating an account on GitHub.

Out-of-process YARA scanner backend, with rspamd plugin. Go + libyara, HTTP /scan, verdict cache + singleflight + optional Redis, distroless. - eilandert/rspamd-yarad

Detection pack for GraphWorm backdoor (Webworm APT) — OneDrive/Graph API C2. YARA, KQL, Sigma, IOCs, ATT&CK mapping. Based on full static RE (FLOSS + Ghidra) of SHA256: 6eb6a342... - yankyw...

Forensic file hasher — BLAKE3 at 1,640 MB/s, 25 hash algorithms, Ed25519 + post-quantum signing, Bitcoin timestamps, YARA scanning, 50+ remote backends. hashdeep for the modern era. - SecurityRonin...

Triển khai hệ thống SIEM bằng Wazuh nhằm phát hiện, và ứng phó với các mối đe dọa an ninh mạng. Hệ thống tích hợp Suricata và Yara để giám sát tính toàn vẹn của tệp, phát hiện và tự động ngăn chặn...

烛照 - Chrome 安全扩展，基于 SnowEyes 二次开发，新增主动指纹嗅探、威胁情报检索、编解码加解密、JS加密绕过Web爆破 - Shaw403/zhuzhao

AZUL plugins for indexing and querying historical samples with yara queries. - AustralianCyberSecurityCentre/azul-plugin-retrohunt

Firmware security analyzer with a web UI + AI co-analyst: binary hardening (NX/PIE/RELRO), CVE/EPSS/KEV, SBOM generate+ingest, YARA, RTOS detection, radare2-grounded triage. Python, 23-step pipelin...

OhMyPCAP is a FOSS web application for analyzing PCAP files using Suricata and other files using YARA. View network alerts and file alerts, browse network metadata (DNS, HTTP, TLS, flows), extract ...

Self-hosted email security gateway: IMAP IDLE monitoring with Rspamd/ClamAV/YARA/URL-feed scanning, a quarantine workflow, and a web dashboard. - izm1chael/mailhook

First public reverse engineering of GAMYBEAR, the Go backdoor used by UAC-0241 against Ukrainian education and state-authority targets. Static + dynamic analysis with 15 findings extending CERT-UA#...