Popular repositories Loading
-
Endpoint-Detection-and-Response-Lab
Endpoint-Detection-and-Response-Lab PublicCustom Sysmon configuration built to detect a simulated 6-stage attack chain — credential dumping, ransomware file drops, persistence, and C2 activity.
-
Malware-PCAP-Analysis-1
Malware-PCAP-Analysis-1 PublicFirst malware PCAP investigation — RedLine malware traffic analysis, IOC extraction, and threat intel verification using tcpdump and Wireshark.
-
Malware-PCAP-Analysis-Easy-As-123
Malware-PCAP-Analysis-Easy-As-123 PublicMalware traffic investigation identifying a NetSupport Manager RAT infection — IOC extraction, C2 analysis, and threat intel validation.
-
NetSupport-RAT-Suricata-Detection
NetSupport-RAT-Suricata-Detection PublicCustom Suricata detection rule built and tested against a NetSupport RAT C2 beacon PCAP — from manual traffic analysis to automated detection.
-
Something went wrong, please refresh the page to try again.
If the problem persists, check the GitHub status page or contact support.
If the problem persists, check the GitHub status page or contact support.