signalblur Goto Github PK

ai-research

Researching how well ChatGPT can detect malicious adversary behavior

asteroid-monitor

A simple web application that monitors potentially hazardous near Earth objects.

bwapp

cobaltstrike

CobaltStrike's source code

crimsonedr

Simulate the behavior of AV/EDR for malware development training.

cve-2020-16898

CVE-202-16898 (Bad Neighbor) Microsoft Windows TCP/IP Vulnerability Detection Logic and Rule

detection-artifacts

This GitHub Repository is home to the YARA rules maintained by signalblur

eternalhushframework

EternalHush - new free advanced open-source c2 framework

formats

File formats

generative-ai-for-beginners

18 Lessons, Get Started Building with Generative AI 🔗 https://microsoft.github.io/generative-ai-for-beginners/

heat-wave-tracker

This is a project designed to track the average temperature across Columbia South Carolina using data provided by the NOAA. This is purely a personal project to improve my Python.

hooklib

The functions interception library written on pure C and NativeAPI with UserMode and KernelMode support

i-s00n

impelf

"ImpELF: A Python-based ELF hashing utility that generates unique fingerprints for ELF binaries using their imported functions and libraries, aiding in malware analysis and similarity detection."

imphash-feed

A threat intel feed of imphash values for various malware

know-normal-json

limagoggles

A lightweight golang app that can take a new line separated string of text and put it into the JSON Format expected by the LimaCharlie lookup gui

log-signal

micro-post

This is a micro python script that sends a post requests and returns the values to STDOUT based on CLI flags supplied

o365-attack-toolkit

A toolkit to attack Office365

pmelsonbot5000

A bot that creates an easily ingestible data feed of pmelson's @ScumBots Twitter account

re2pcap

rpm-ostree-update-checker

If you've ever ran rpm-ostree update you'll know that it often is prevented from running while refresh-md is. I like to check for updates obsessively and sometimes I hate waiting for refresh-md to finish. Thus - this script was born so that if refresh-md was preventing me from running rpm-ostree, it'd auto retry until it failed.

ryuk-intel

List of recent Ryuk intel reports.

sandfly-filescan

Entropy file scanner for Linux to detect packed or encrypted binaries related to malware. Written in Golang to be highly portable and fast.

sandfly-processdecloak

Sandfly Linux Stealth Rootkit Decloaking Utility

scumbots-datafeed

This is a feed of @pmelson's, @ScumBots twitter feed. Its goal is to provide an easy to digest feed of the indicators shared by the @ScumBots twitter account.

sigma

Generic Signature Format for SIEM Systems

sysmoncommunityguide

TrustedSec Sysinternals Sysmon Community Guide

ufo_glasnost

English Translation of Col. Dr. Marina Popowitsch's book "UFO Glasnost"