Uncurated Links

...a holding pen, not a recommendation list.

2087 links · page 14 of 35

filter this page:

• 0781 LOLAPPS
  lolapps-project.github.io
  url: https://lolapps-project.github.io/
• 0782 LOFLCAB
  lofl-project.github.io
  url: https://lofl-project.github.io/
• 0783 LOLESXi
  lolesxi-project.github.io
  url: https://lolesxi-project.github.io/LOLESXi/
• 0784 Untitled page on lolrmm.io
  lolrmm.io
  url: https://lolrmm.io/
• 0785 GitHub - lolc2/lolc2.github.io: lolC2 is a collection of C2 frameworks that leverage legitimate services to evade detection · GitHub
  github.com
  url: https://github.com/lolc2/lolc2.github.io
• 0786 WTFBins
  wtfbins.wtf
  url: https://wtfbins.wtf/
• 0787 LOTHardware
  lothardware.com.tr
  url: https://lothardware.com.tr/
• 0788 Hunting Keywords
  mthcht.github.io
  url: https://mthcht.github.io/ThreatHunting-Keywords/
• 0789 Purpleteam/Detection/Threat Hunting/generic at main · mthcht/Purpleteam · GitHub
  github.com
  url: https://github.com/mthcht/Purpleteam/tree/main/Detection/Threat%20Hunting/generic
• 0790 awesome-lists/Lists at main · mthcht/awesome-lists · GitHub
  github.com
  url: https://github.com/mthcht/awesome-lists/tree/main/Lists
• 0791 GitHub - Cyb3r-Monk/Threat-Hunting-and-Detection: Repository for threat hunting and detection queries, etc. for Defender for Endpoint and Microsoft Sentinel in KQL(Kusto Query Language). · GitHub
  github.com
  url: https://github.com/Cyb3r-Monk/Threat-Hunting-and-Detection
• 0792 GitHub - Yamato-Security/hayabusa: Hayabusa (隼) is a sigma-based threat hunting and fast forensics timeline generator for Windows event logs. · GitHub
  github.com
  url: https://github.com/Yamato-Security/hayabusa
• 0793 GitHub - Yamato-Security/hayabusa-rules: Curated Windows event log Sigma rules used in Hayabusa and Velociraptor. · GitHub
  github.com
  url: https://github.com/Yamato-Security/hayabusa-rules
• 0794 GitHub - ahmedkhlief/APT-Hunter: APT-Hunter is Threat Hunting tool for windows event logs which made by purple team mindset to provide detect APT movements hidden in the sea of windows event logs to decrease the time to uncover suspicious activity · GitHub
  github.com
  url: https://github.com/ahmedkhlief/APT-Hunter
• 0795 GitHub - yarox24/EvtxHussar: Initial triage of Windows Event logs · GitHub
  github.com
  url: https://github.com/yarox24/EvtxHussar
• 0796 GitHub - wagga40/Zircolite: A standalone SIGMA-based detection tool for EVTX, Auditd and Sysmon for Linux logs · GitHub
  github.com
  url: https://github.com/wagga40/Zircolite
• 0797 GitHub - wagga40/Zircolite-Rules: Sigma rules converted for direct use with Zircolite · GitHub
  github.com
  url: https://github.com/wagga40/Zircolite-Rules
• 0798 GitHub - WithSecureLabs/chainsaw: Rapidly Search and Hunt through Windows Forensic Artefacts · GitHub
  github.com
  url: https://github.com/WithSecureLabs/chainsaw
• 0799 GitHub - joeavanzato/WMIHunter: Asynchronous Remote Evidence Retrieval for rapid network-wide threat hunting · GitHub
  github.com
  url: https://github.com/joeavanzato/WMIHunter
• 0800 GitHub - NextronSystems/evtx-baseline: A repository hosting example goodware evtx logs containing sample software installation and basic user interaction · GitHub
  github.com
  url: https://github.com/NextronSystems/evtx-baseline
• 0801 GitHub - microsoft/Microsoft-365-Defender-Hunting-Queries: Sample queries for Advanced hunting in Microsoft 365 Defender · GitHub
  github.com
  url: https://github.com/microsoft/Microsoft-365-Defender-Hunting-Queries
• 0802 GitHub - reprise99/Sentinel-Queries: Collection of KQL queries · GitHub
  github.com
  url: https://github.com/reprise99/Sentinel-Queries
• 0803 GitHub - Bert-JanP/Hunting-Queries-Detection-Rules: KQL Queries. Defender For Endpoint and Azure Sentinel Hunting and Detection Queries in KQL. Out of the box KQL queries for: Advanced Hunting, Custom Detection, Analytics Rules & Hunting Rules. · GitHub
  github.com
  url: https://github.com/Bert-JanP/Hunting-Queries-Detection-Rules
• 0804 Proactive Malicious Domain Search - SANS Internet Storm Center
  isc.sans.edu
  source: https://isc.sans.edu/forums/diary/Proactive+Malicious+Domain+Search/23065/
  resolved: https://isc.sans.edu/diary/Proactive+Malicious+Domain+Search/23065
• 0805 Tracking Newly Registered Domains - SANS Internet Storm Center
  isc.sans.edu
  url: https://isc.sans.edu/diary/Tracking+Newly+Registered+Domains/23127
• 0806 Suspicious Domains Tracking Dashboard - SANS ISC
  isc.sans.edu
  source: https://isc.sans.edu/forums/diary/Suspicious+Domains+Tracking+Dashboard/23046/
  resolved: https://isc.sans.edu/diary/Suspicious+Domains+Tracking+Dashboard/23046
• 0807 Actionable Detects: DNS Keynote by Seth Misenar on Prezi
  prezi.com
  url: https://prezi.com/vejpnxkm85ih/actionable-detects-dns-keynote/
• 0808 Detecting DNS Tunneling
  sans.org
  source: https://www.sans.org/reading-room/whitepapers/dns/detecting-dns-tunneling-34152
  resolved: https://www.sans.org/white-papers/34152
• 0809 Detecting dynamic DNS domains in Splunk | Splunk
  splunk.com
  url: https://www.splunk.com/en_us/blog/security/detecting-dynamic-dns-domains-in-splunk.html
• 0810 Random Words on Entropy and DNS | Splunk
  splunk.com
  url: https://www.splunk.com/en_us/blog/security/random-words-on-entropy-and-dns.html
• 0811 GitHub - unknownhad/CloudIntel: This repo contains IOC, malware and malware analysis associated with Public cloud · GitHub
  github.com
  source: https://github.com/unknownhad/AWSAttacks
  resolved: https://github.com/unknownhad/CloudIntel
• 0812 From Threat Report to (KQL) Hunting Query - Microsoft Security Blogs - Kusto
  kqlquery.com
  url: https://kqlquery.com/posts/from-threat-report-to-hunting-query/
• 0813 GitHub - joeavanzato/Trawler: PowerShell script helping Incident Responders discover potential adversary persistence mechanisms. · GitHub
  github.com
  url: https://github.com/joeavanzato/Trawler
• 0814 GitHub - ine-labs/ThreatSeeker: ThreatSeeker: Threat Hunting via Windows Event Logs · GitHub
  github.com
  url: https://github.com/ine-labs/ThreatSeeker
• 0815 GitHub - last-byte/PersistenceSniper: Powershell module that can be used by Blue Teams, Incident Responders and System Administrators to hunt persistences implanted in Windows machines. Official Twitter/X account @PersistSniper. Made with ❤️ by @last0x00 and @dottor_morte · GitHub
  github.com
  url: https://github.com/last-byte/PersistenceSniper
• 0816 Beyond good ol’ Run key – All parts | Hexacorn
  hexacorn.com
  url: https://www.hexacorn.com/blog/2017/01/28/beyond-good-ol-run-key-all-parts/
• 0817 GitHub - 0x4D31/awesome-threat-detection: ✨ A curated list of awesome threat detection and hunting resources 🕵️‍♂️ · GitHub
  github.com
  url: https://github.com/0x4D31/awesome-threat-detection
• 0818 Bring Your Own Land (BYOL) — A Novel Red Teaming Technique | Mandiant | Google Cloud Blog
  cloud.google.com
  source: https://www.mandiant.com/resources/blog/bring-your-own-land-novel-red-teaming-technique
  resolved: https://cloud.google.com/blog/topics/threat-intelligence/bring-your-own-land-novel-red-teaming-technique/
• 0819 Bootloaders.io
  bootloaders.io
  url: https://www.bootloaders.io/
• 0820 HijackLibs
  hijacklibs.net
  url: https://hijacklibs.net/
• 0821 GitHub - tomwechsler/Active_Directory_Advanced_Threat_Hunting: This repo is about Active Directory Advanced Threat Hunting · GitHub
  github.com
  url: https://github.com/tomwechsler/Active_Directory_Advanced_Threat_Hunting
• 0822 GitHub - THORCollective/HEARTH: A community-driven repository for threat hunting ideas, methodologies, and research that serves as a central gathering place for hunters to share knowledge, collaborate on techniques, and advance the field of threat hunting. · GitHub
  github.com
  source: https://github.com/triw0lf/HEARTH
  resolved: https://github.com/THORCollective/HEARTH
• 0823 GitHub - MHaggis/PowerShell-Hunter: PowerShell tools to help defenders hunt smarter, hunt harder. · GitHub
  github.com
  url: https://github.com/MHaggis/PowerShell-Hunter
• 0824 Linux Detection Engineering - The Grand Finale on Linux Persistence — Elastic Security Labs
  elastic.co
  url: https://www.elastic.co/security-labs/the-grand-finale-on-linux-persistence
• 0825 GitHub - Krook9d/PurpleLab: PurpleLab is an efficient and readily deployable lab solution, providing a swift setup for cybersecurity professionals to test detection rules and undertake various security tasks, all accessible through a user-friendly web interface · GitHub
  github.com
  url: https://github.com/Krook9d/PurpleLab
• 0826 GitHub - BushidoUK/Open-source-tools-for-CTI: Public Repository of Open Source Tools for Cyber Threat Intelligence Analysts and Researchers · GitHub
  github.com
  url: https://github.com/BushidoUK/Open-source-tools-for-CTI
• 0827 Online Virus Scanner — Kaspersky Threat Intelligence Portal
  opentip.kaspersky.com
  url: https://opentip.kaspersky.com/
• 0828 abuse.ch | Fighting malware and botnets
  abuse.ch
  source: https://www.abuse.ch/
  resolved: https://abuse.ch/
• 0829 CAIDA
  caida.org
  source: https://www.caida.org/home/
  resolved: https://www.caida.org/
• 0830 Team Cymru Pure Signal Products | Team Cymru
  team-cymru.com
  source: https://team-cymru.com/products/
  resolved: https://www.team-cymru.com/products
• 0831 Bitdefender Operational Threat Intelligence
  bitdefender.com
  source: https://www.bitdefender.com/oem/advanced-threat-intelligence.html
  resolved: https://www.bitdefender.com/en-us/business/products/operational-threat-intelligence
• 0832 Cybersecurity Threats
  cisecurity.org
  source: https://www.cisecurity.org/cybersecurity-threats/
  resolved: https://www.cisecurity.org/cybersecurity-threats
• 0833 GitHub - mlsecproject/combine: Tool to gather Threat Intelligence indicators from publicly available sources · GitHub
  github.com
  url: https://github.com/mlsecproject/combine
• 0834 Resources - Cyber Threat Alliance
  cyberthreatalliance.org
  url: https://www.cyberthreatalliance.org/resources/
• 0835 Untitled page on cyber45.com
  cyber45.com
  url: https://www.cyber45.com/search-ioc
• 0836 Emerging Threats
  community.emergingthreats.net
  source: http://doc.emergingthreats.net/bin/view/Main/EmergingFAQ
  resolved: https://community.emergingthreats.net/
• 0837 LevelBlue - Open Threat Exchange
  otx.alienvault.com
  url: https://otx.alienvault.com/
• 0838 GitHub - Graylog2/graylog-plugin-threatintel: Graylog Processing Pipeline functions to enrich log messages with IoC information from threat intelligence databases · GitHub
  github.com
  url: https://github.com/Graylog2/graylog-plugin-threatintel
• 0839 hashdd - Known Good Cryptographic Hashes
  hashdd.com
  url: https://hashdd.com/
• 0840 HP Threat Research · GitHub
  github.com
  url: https://github.com/hpthreatresearch