cobaltstrike-sleepmask-yara

Just a git repo for the sleepmask detection rule i found in https://codex-7.gitbook.io/codexs-terminal-window/blue-team/detecting-cobalt-strike/sleep-mask-kit-iocs

Stars

9

Forks

1

Language

YARA

Last Updated

Feb 11, 2024

Similar Repos

Repo	Language	Stars	Description	Updated At
CobaltStrike_BOF_Collections	None	81	Useful Cobalt Strike BOFs found or used during engagements	May 20, 2023
lockbit3.0detect_v2-byInterProbe.yara	YARA	4	Detects new LockBit 3.0 variants	Jul 04, 2022
iocs	YARA	4	This repository is for Indicators of Compromise (IOCs) from Zscaler ThreatLabz public reports	Aug 08, 2022
MalwareResearch	YARA	4	A repository where I analyze malware & post my research on it, including writing YARA …	Aug 23, 2021
yara-rules	YARA	5	YARA rules for malware detection/classification	Apr 13, 2022
stacs-rules	YARA	5	Community rule packs for STACS	Feb 25, 2022
Malware-IOCs	YARA	6	some of my IOCs from malware investigations	Jul 04, 2022
Detection	YARA	7	None	Jul 05, 2022
detection	YARA	8	Threat Detection Rules (Snort/Sigma/Yara)	Jun 12, 2022
js-yara-rules	YARA	9	Yara rules for malicious javascript files from public repositories or written by me.	Jan 10, 2022
YARA-sort	YARA	9	Yara sort	Jun 23, 2022
siglearn	YARA	9	Code for BH21 talk: "Generating YARA Rules by Classifying Malicious Byte Sequences"	Jun 23, 2022
log4j-CVE-2021-44228-Public-IoCs	YARA	11	Public IoCs about log4j CVE-2021-44228	Dec 17, 2021
badthings-tools	YARA	11	None	May 16, 2022
yara-rules	YARA	14	Yara rules written by me, for free use.	May 13, 2022
yara-rules-vt	YARA	14	Collection of YARA rules designed for usage through VirusTotal.com.	Aug 08, 2022
malware-indicators	YARA	223	Citizen Lab Malware Reports	Jul 28, 2022
S1EM	YARA	247	This project is a SIEM with SIRP and Threat Intel, all in one.	Sep 01, 2022
protections-artifacts	YARA	394	Elastic Security detection content for Endpoint	Aug 11, 2022
Yara-Rules	YARA	438	Repository of YARA rules made by Trellix ATR Team	Aug 15, 2022
sunburst_countermeasures	YARA	545	None	Jul 21, 2022
Ukraine-Cyber-Operations	YARA	814	Curated Intelligence is working with analysts from around the world to provide useful information to …	Jun 18, 2022
red_team_tool_countermeasures	YARA	2528	None	Aug 12, 2022
rules	YARA	3195	Repository of yara rules	Aug 16, 2022
yara-rulz	YARA	2	Collection of generic YARA rules	Dec 13, 2022
Yara-Rules	YARA	9	None	Nov 24, 2022
CVE-2023-21716	YARA	2	POC : CVE-2023-21716 Microsoft Word RTF Font Table Heap Corruption	Apr 18, 2023
scan-virus-ghaction-assets	YARA	2	Assets of Scan Virus (GitHub Action). For any information, please visit the main repository `hugoalh/scan-virus-ghaction`.	Apr 08, 2023
DailyIOC	YARA	304	IOC from articles, tweets for archives	Apr 21, 2023
Orion	YARA	131	A YARA rules repository continuously updated for monitoring the old and new threats from articles, …	Mar 27, 2023
malware_analysis	YARA	78	This repository contains analysis scripts, YARA rules, and additional IoCs related to our Telekom Security …	Apr 21, 2023
bad-dicom	YARA	4	Explotation framework for CVE-2019-11687	Jun 13, 2022
SMAT	YARA	2	SMAT - Static Malware Analyzer Tool	Nov 03, 2020
Manalyze	YARA	910	A static analyzer for PE executables.	Apr 25, 2023
nviso-cti	YARA	37	None	Mar 22, 2023
yara-rules	YARA	2	None	Mar 23, 2021
BlackCatRansomware.yara	YARA	2	Yara rule that detects BlackCat ransomware.	Jul 03, 2022
memory-scan	YARA	2	Detect suspcoius shellcode/pe in memory	Dec 01, 2021
slack-yara-scanner	YARA	2	A Slack App (AWS Lambda) for detecting and notifying on secret disclosure	Jul 26, 2022
Robust-Intelligent-Malware-Detection	YARA	2	None	May 30, 2022
broapt	YARA	2	APT Detection System based on Bro Framework	Jan 10, 2022
yara	YARA	2	cobaltstrike 检测规则	Jul 31, 2022
APKiD	YARA	2	Android Application Identifier for Packers, Protectors, Obfuscators and Oddities - PEiD for Android	Jan 23, 2022
malware-analysis-yara-rules	YARA	2	A collection of helpful YARA rules for malware analysis	Jan 17, 2021
YARA	YARA	3	Hundred Days of Yara Challenge	Jun 05, 2022
exRules	YARA	3	A set of detection rules shared with the community.	Aug 12, 2022
iocs	YARA	3	None	Aug 02, 2022
securityonion-strelka	YARA	14	None	May 02, 2021
LightDefender-yara-rules	YARA	15	Repository of yara rules	May 19, 2022
Incident-Response-with-Threat-Intelligence	YARA	17	Incident Response with Threat Intelligence, published by Packt	Aug 05, 2022