Misp project created a dedicated Misp instance to share information: xitter.cf/MISPProject/status/123… ask them by DM the access. #COVID19 dedicated MISP covid-19.iglocska.eu/users/l…

SMBv3 Compression Tester Multiple scripts and detection tools to check if a Windows machine has SMBv3 protocol enabled with the compression feature. Our NSE script is based on smb2-capabilities.nse but we will PR the nmap repository with those changes. github.com/ClarotyICS/CVE202…

AggressorScripts Disclaimer: These scripts are to help you audit your machines or machines you're authorized to audit. github.com/ramen0x3f/Aggress…

This tool is intended for penetration testers who want to perform an engagement quickly and efficiently. While this tool can be used for more covert operations (including some additions below), it really shines when used at the scale of a large network. github.com/Raikia/CredNinja

PowerExfil A collection of custom data exfiltration scripts for Red Team assessments. github.com/1N3/PowerExfil

VB2019 paper: Pulling the PKPLUG: the adversary playbook for the long-standing espionage activity of a Chinese nation-state adversary virusbulletin.com/virusbulle…

Threat Dragon is a free, open-source, cross-platform threat modeling application including system diagramming and a rule engine to auto-generate threats/mitigations. It is an OWASP Incubator Project. integration with other development lifecycle tools. github.com/mike-goodwin/owas…

Evasion techniques - Malware Evasion Encyclopedia, which contains over 50 techniques used by various malwares to detect virtualized and sandboxed environments. evasions.checkpoint.com/

Intelligence operation against targets in Indonesia “C:\Windows\System32\rundll32.exe” shell32.dll,ShellExec_RunDLL regsvr32 /s C:\ProgramData\pubpool.dll /i:process104.dll “C:\WINDOWS\system32\regsvr32.exe” /s C:\ProgramData\pubpool.dll /i:process104.dll lab52.io/blog/intelligence-o…

The ADTimeline script generates a timeline based on Active Directory replication metadata for objects considered of interest. Replication metadata gives you the time at which each replicated attribute for a given object was last changed. github.com/ANSSI-FR/ADTimeli…

MSSQL forensics (1) - MDF fundamentals kazamiya.net/mssql_4n6-01

Interesting Recon Script wilbursecurity.com/2020/02/i…

Fraudsters cloak credit card skimmer with fake content delivery network, ngrok server blog.malwarebytes.com/threat…