advanced-threat-research Goto Github PK

atr_hax_ctf_2021

McAfee Enterprise Advanced Threat Research Capture the Flag

atr_hax_ctf_2022

Trellix Advanced Threat Research CTF compitition of 2022

creosote

Creosote is our solution to searching for the tarfile vulnerability described by CVE-2007-4559.

cve-2020-16898

CVE-2020-16898 (Bad Neighbor) Microsoft Windows TCP/IP Vulnerability Detection Logic and Rule

cve-2020-16899

CVE-2020-16899 - Microsoft Windows TCP/IP Vulnerability Detection Logic and Rule

darkside-config-extract

dotdumper

An automatic unpacker and logger for DotNet Framework targeting files

dotdumpergui

A graphical user interface to easily read through, and filter, DotDumper JSON-based logs

dotdumpernative

The native (unmanaged) library which contains hooks for native functions that are hooked using DotDumper

expert-rules

ghidrascripts

Scripts to run within Ghidra, maintained by the Trellix ARC team

iocs

Repository containing IOCs, CSV and MISP JSON from our blogs

netllix

A project created with an aim to emulate and test exfiltration of data over different network protocols.

ripple-20-detection-logic

Ripple20 Critical Vulnerabilities - Detection Logic and Signatures

russian_cyberthreats_yara

Repository with aggregated public source yara rules

threat-reports

Repository to store the Threat Reports made by the McAfee Enterprise ATR Team

xbypass

A tool to facilitate ROP Chain Development for XML Character Sanitization

yara-rules

Repository of YARA rules made by Trellix ATR Team