Repository of yara rules

APT & CyberCriminal Campaign Collection

All-in-One malware analysis tool.

Guidance for mitigation web shells. #nsacyber

PEframe is a open source tool to perform static analysis on Portable Executable malware and malicious MS Office documents.

Tools for hunting for threats.

Sophos-originated indicators-of-compromise from published reports

IOC from articles, tweets for archives

Indicators of stalkerware apps

Repository of Yara rules dedicated to Phishing Kits Zip files

Yara Ruleset for scanning Linux servers for shells, spamming, phishing and other webserver baddies

Mapping XProtect's obfuscated malware family names to common industry names.

恶意软件家族样本识别/分类器

A repository where I analyze malware & post my research on it, including writing YARA rules for them.

Memory dump strings to identify malware

Collection of IOCs from Malware Analysis

rules & sigs for personal research

IOC from articles, tweets for archives