Malcolm: A powerful, easily deployable network traffic analysis tool suite for full packet capture artifacts (PCAP files), Zeek logs and Suricata alerts Check ✅️ it out: github.com/idaholab/Mal... #cybersecurity #infosec #threathunting #suricata #zeek

Paranoya: A simple IOC and Yara scanner for Linux Check ✅️ it out: github.com/c0m4r/paranoya #cybersecurity #yararules #linux

Malwatcher: A self-hosted platform for verifying IOCs by centralizing online tools into one interface Check ✅️ it out: github.com/R4z1xx/malwa... #cybersecurity ##threatintelligence #threatintel #infosec

ThreatSentry AI: A threat hunting dashboard that utilizes ML and determines risk assessment by vulnerability identification of data Check✅️ it out: github.com/EclipseManic... #threathunting #cybersecurity #infosec #ml #ai-security #threatdetection

Nyxelf: A Linux ELF tool for analyzing malicious Linux ELF binaries that supports static and dynamic analysis 🔗Check it out: github.com/M3rcuryLake/... #binaryanalysis #linuxelf #reverseengineering #malwareanalysis #threathunting #infosec

Using KQL to Enhance Threat Detection rodtrent.substack.co... #MustLearnKQL #KQL #KQLMysteries

yara2stix - A command line tool that converts the YARA Rules into STIX 2.1 Objects Check it out: github.com/muchdogesec/... #yararules #detectionengineering #stix #threatintelligence #threatdetection

S-TIP (Seamless Threat Intelligence Platform) - A threat intelligence platform to convert CTI into STIX files for more comprehensive viewing and information sharing Check it out:🔥🔥 github.com/s-tip/stip-c... #threatintel #STIX #threathunting #detectionengineering #cybersecurity #infosec

Matano - An open source security data lake for threat hunting, detection & response, and cybersecurity analytics at petabyte scale on AWS Check it out: github.com/matanolabs/m... #threathunting #detectionengineering #aws #cybersecurity #infosec

Catalyst - A self-hosted, open source incident response platform and ticket system that helps to automate alert handling and incident response processes Check it out 🔥🔥: github.com/SecurityBrew... #DFIR #incidentresponse #alerttriage #cybersecurity

UTMStack - A customizable SIEM and XDR powered by real-time correlation and threat intelligence Check it out 🔥🔥: github.com/utmstack/UTM... #threatintelligence #threathunting #SIEM #SOAR #detectionengineering #cybersecurity #infosec

Venator - A flexible threat detection platform that simplifies rule management and deployment using K8s CronJob and Helm. Check it out: github.com/nianticlabs/... #detectionengineering #threathunting #kubernetes #infosec #cybersecurity

Hayabusa - A sigma-based threat hunting and fast forensics 🔎 timeline generator for Windows event logs. It can easily be integrated with other hunting & DFIR tools such as Velociraptor & OpenRelik. Check it out 🔥🔥: github.com/Yamato-Secur... #threathunting #DFIR #sigma #cybersecurity #infosec

Yeti (Your Everyday Threat Intelligence) - A platform that manages forensics 🔍 intelligence and connects CTI with DFIR artifacts Check it out 🔥🔥: github.com/yeti-platfor... #threatintelligence #DFIR #CTI #threathunting #cyberforensics #cybersecurity #infosec

YaraGuard - a static malware analysis tool that uses YARA rules as it's core Check it out 🔥🔥: github.com/RootMiner/Ya... #yararules #threathunting #malwareanalysis #cybersecurity #infosec

Ransomware Detection Using ML Models github.com/muditmathur2... #ransomware #ml #detectionengineering #threathunting #threatdetection #infosec #cybersecurity

openSquat - An open-source tool for detecting domain look-alikes by searching for newly registered domains that might be impersonating legit domains and brands. github.com/atenreiro/op... #detectionengineering #threatdetection #threathunting #cybersecurity #infosec

Acra - A database protection suite with field level encryption and intrusion detection that provides SQL injection prevention, honeypots, and support for both client and proxy encryption Check it out: github.com/cossacklabs/... #threatdetection #databasesecurity #honeypot #cybersecurity #infosec

Acra - A database protection suite with field level encryption and intrusion detection that provides SQL injection prevention, honeypots, and support for both client and proxy encryption Check it out: github.com/cossacklabs/... #threatdetection #databasesecurity #honeypot #cybersecurity #infosec

Mihari - A query aggregator for OSINT based threat hunting github.com/ninoseki/mih... Check it out: 🔥🔥 #threathunting #OSINT #cybersecurity #infosec

Ronin vulns: A Ruby library that tests URLs for Local File Inclusion (LFI), Remote File Inclusion (RFI), SQL injection (SQLi), and Cross Site Scripting (XSS), Server Side Template Injection (SSTI), and Open Redirects. github.com/ronin-rb/ron... #infosec #cybersecurity #threatdetection #xss #SQLi

abuse.ch/blog/communi... Many thanks to Roman and Abuse.ch for working tirelessly on this issue for the greater good.

Ronin vulns: A Ruby library that tests URLs for Local File Inclusion (LFI), Remote File Inclusion (RFI), SQL injection (SQLi), and Cross Site Scripting (XSS), Server Side Template Injection (SSTI), and Open Redirects. github.com/ronin-rb/ron... #infosec #cybersecurity #threatdetection #xss #SQLi

KQL Detection rule to identify MS Advisory personal note abuse. Did some testing and was able to add a URL to the note: github.com/AttacktheSOC... Related: www.bleepingcomputer.com/news/securit...

Today I created a few KQL queries to detect AzureDevOps - Organization Settings changes. github.com/alexverboon/... #KQL #AzureDevOps #Security #Sentinel

Community Generated Yara Rules for detection of malware families github.com/harryeetsour... #cybersecurity #infosec #yararules #malwaredetection #threathunting #malware #infosec

🚀More updates to the EDR Telemetry website! ✨ New Blog section - More posts on telemetry incoming ✨ New Mitre ATT&CK Mappings page ✨ Hover over the ⚠️(Partially) to see the reason ✨ Added "Legend" that describes each attribute 🗑️ The Google Sheet will no longer be updated.

The Free & Affordable Training site (training.dfirdiva.com) was created to help people find quality free and low cost training across various platforms. The main focus is #DFIR, #OSINT & Blue Team Training. Nothing listed is over $1,000.

I have been slowly writing the next articles: 1. MAS 08: Introduction to MacOS malware analysis. 2. ER 03: macOS/iOS (part 01) 3. MAS 09: Shellcode Analysis 4. ER 04: Browsers (part 01) 5. RE 05: Hypervisors (part 01) exploitreversing.com #vulnerability #exploitation #malwareanalysis

#DFIR 💭 of the Day: This field requires we keep up with the latest information! Luckily for the community @phillmoore.bsky.social pulls together content from #DFIR blogs each week. Check it out! thisweekin4n6.com/2024/11/17/w...

Prowler: Prowler An Open Source Security tool for AWS, Azure, GCP and Kubernetes to do security assessments, audits, incident response, compliance, continuous monitoring, hardening and forensics readiness. github.com/prowler-clou... #cybersecurity #securityaudit #dfir #kubernetes #aws #azure #gcp

Sn0int - A Semi-automatic OSINT framework and package manager to gather intelligence on a given target github.com/kpcyrd/sn0int #cybersecurity #osint

Useful article on how to use #Python for cybersecurity www.stationx.net/python-for-c...

Incident Response and Threat Hunting: A comprehensive collection of Kusto Query Language (KQL) queries used in detection, threat hunting, that focuses on Detections and Digital Forensics github.com/CodeByHarri/... #dfir #incidentresponse #threathunting #KQL #detections

Incident Response and Threat Hunting: A comprehensive collection of Kusto Query Language (KQL) queries used in detection, threat hunting, that focuses on Detections and Digital Forensics github.com/CodeByHarri/... #dfir #incidentresponse #threathunting #KQL #detections

If you are in cybersecurity repost this so we can all follow each other 😬

Three separate malware apps for macOS capable of bypassing macOS security tied to North Korean developers www.powerpage.org/three-separa... #Apple #macOS #NorthKorea #hack #malware #macOS #privacy #security #apps #bitcoin #computing

🎙️ New @dfnpodcast.bsky.social episode is out! 📱 iOS 18’s Inactivity Reboots Explained: AFU to BFU Transitions with Chris Vance from Magnet Forensics. 🔗 Watch here: www.youtube.com/live/_ZOuKR-... #DigitalForensics #MobileForensics #DFIR #IOS

Awesome Incident Response- A curated list of IR tools Check it out: github.com/meirwah/awes... #DFIR #cybersecurity #infosec

Hi Blackskyers🖤🖤 I've been on here for a while in the Blacksky 🖤feed and have the starter pack just in case adding#️⃣ for better interaction 🤎🤎🖤🖤 #AddtoBlacksky

Zehef - An open source tool used to check emails 📧 for analysis and investigation Check it out: github.com/N0rz3/Zehef #cybersecurity #infosec #osint #emailanalysis #threathunting

PANIX - Persistence Against *NIX An excellent Linux persistence tool for detecting persistence mechanisms Check it out 🔥🔥 #cybersecurity #infosec #linuxpersistence #securityresearch #detectionengineering #pentesting github.com/Aegrah/PANIX

APT-Hunter is a great Python built tool for detecting APTs (Advanced Persistent Threats) in windows event logs Check it out: github.com/ahmedkhlief/... #cybersecurity #infosec #threathunting #pythontools #securitytools #windowseventlogs

As we close out 2023, Check ✅️ out my Elastic Advent Calendar entry "How to investigate a Malicious Alert for Threat Hunting in Elastic Security" discuss.elastic.co/t/dec-25th-2... #threathunting #infosec #cybersecurity #securityanalysis #incidentresponse

Join me for an Elastic Security Community virtual event. I will be giving a tech talk on my Journey Into Malware Research and Reverse Engineering. Hope to see you there! 🤩🙌 Date: Thursday, October 19 Time: 8am PST/11am EST #malware #cybersecurity Meetup link: www.meetup.com/elastic-unit...

ElectricEye⚡️: A Python CLI SaaS and cloud tool for Security Posture Management and Attack Surface Monitoring. The tool provides services and evaluation of environments and over 20 industry, regulatory controls frameworks. #infosec #cloudsecurity #python https://github.com/jonrau1/ElectricEye

Smartvmi: A virtual Machine Introspection (VMI) for memory forensics and machine-learning. https://github.com/GDATASoftwareAG/smartvmi #infosec #memoryforensics

Malwoverview is an awesome threat hunting tool. Check it out🔥🔥: #threathunting #infosec #threatintel #malwareanalysis https://github.com/alexandreborges/malwoverview