This project aims to provide a simple and efficient way to check the reputation of your observables using multiple services, without having to deploy a complex solution.

YARA is a powerful pattern-matching tool and rule format used for identifying and classifying files based on specific patterns…

本笔通过对THM的SOC Level 1中YAR的学习详细介绍了威胁情报工具及其应用。威胁情报旨在通过数据分析识别攻击者、评估威胁动机、能力及入侵指标，从而帮助安全团队采取应对措施。情报分为战略、技术、战术和行动情报，不同层次的信息用于指导不同安全决策。文中首先讲解了…

Yara…

Today, I focused on refining the IOC Enrichment Tool by clearly structuring the project on GitHub. This update aims to enhance the…

Plaguards automates PowerShell deobfuscation, helping security teams quickly identify threats and false positives with comprehensive PDF reports.

No dia 2 de Julho de 2025 logo após publicar o artigo "Plump Spider: Análise Técnica e Estratégica de um Grupo de Ameaça Avançada Contra o…

IOC vs IOA: The Clues Cybercriminals Didn’t Mean to Leave Behind

Hey everyone! 👋 Today, we’re diving deep into a crucial topic for SOC (Security Operations Center) analysts: Threat Intelligence. In this…

Indicators of Compromise (IoCs): The Digital Forensics Trail

Malware Triage and Static Analysis I was handed a suspicious ZIP archive discovered on an employee’s workstation. My task was to perform an initial static triage before any runtime analysis. to …

Malware Dynamic Analysis Dynamic analysis involves observing the malware’s runtime behavior in a controlled environment. The objective was to identify how the sample interacts with the system, what …