├── .yara-ci.yml ├── LICENSE.txt ├── README.md ├── RMM_Inventory.csv ├── clamav ├── clamav.ldb └── indicator_rmm.ldb ├── scripts ├── mbcscbyar.py └── mbfyar.py ├── snort ├── snort2.rules └── snort3.rules ├── yara ├── indicator_knownbad_certs.yar ├── indicator_knownbad_id.yar ├── indicator_office.yar ├── indicator_packed.yar ├── indicator_rmm.yar ├── indicator_suspicious.yar ├── indicator_tools.yar └── malware.yar └── zeek └── infostealer-email-addr.intel /.yara-ci.yml: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/ditekshen/detection/HEAD/.yara-ci.yml -------------------------------------------------------------------------------- /LICENSE.txt: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/ditekshen/detection/HEAD/LICENSE.txt -------------------------------------------------------------------------------- /README.md: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/ditekshen/detection/HEAD/README.md -------------------------------------------------------------------------------- /RMM_Inventory.csv: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/ditekshen/detection/HEAD/RMM_Inventory.csv -------------------------------------------------------------------------------- /clamav/clamav.ldb: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/ditekshen/detection/HEAD/clamav/clamav.ldb -------------------------------------------------------------------------------- /clamav/indicator_rmm.ldb: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/ditekshen/detection/HEAD/clamav/indicator_rmm.ldb -------------------------------------------------------------------------------- /scripts/mbcscbyar.py: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/ditekshen/detection/HEAD/scripts/mbcscbyar.py -------------------------------------------------------------------------------- /scripts/mbfyar.py: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/ditekshen/detection/HEAD/scripts/mbfyar.py -------------------------------------------------------------------------------- /snort/snort2.rules: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/ditekshen/detection/HEAD/snort/snort2.rules -------------------------------------------------------------------------------- /snort/snort3.rules: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/ditekshen/detection/HEAD/snort/snort3.rules -------------------------------------------------------------------------------- /yara/indicator_knownbad_certs.yar: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/ditekshen/detection/HEAD/yara/indicator_knownbad_certs.yar -------------------------------------------------------------------------------- /yara/indicator_knownbad_id.yar: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/ditekshen/detection/HEAD/yara/indicator_knownbad_id.yar -------------------------------------------------------------------------------- /yara/indicator_office.yar: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/ditekshen/detection/HEAD/yara/indicator_office.yar -------------------------------------------------------------------------------- /yara/indicator_packed.yar: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/ditekshen/detection/HEAD/yara/indicator_packed.yar -------------------------------------------------------------------------------- /yara/indicator_rmm.yar: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/ditekshen/detection/HEAD/yara/indicator_rmm.yar -------------------------------------------------------------------------------- /yara/indicator_suspicious.yar: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/ditekshen/detection/HEAD/yara/indicator_suspicious.yar -------------------------------------------------------------------------------- /yara/indicator_tools.yar: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/ditekshen/detection/HEAD/yara/indicator_tools.yar -------------------------------------------------------------------------------- /yara/malware.yar: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/ditekshen/detection/HEAD/yara/malware.yar -------------------------------------------------------------------------------- /zeek/infostealer-email-addr.intel: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/ditekshen/detection/HEAD/zeek/infostealer-email-addr.intel --------------------------------------------------------------------------------