bobby-tablez/Sigma-Rules

Stars
1
Language
Created almost 3 years ago
Updated over 2 years ago

bobby-tablez/Sigma-Rules

bobby-tablez

There are no reviews yet. Be the first to send feedback to the community and the maintainers!

Contains sigma rules based on current threat research

IP-Obfuscator

Hide an IP address in scripts using hex/decimal/octal conversions

VBScrambler

A Python-based VBScript Code Obfuscator

Enable-All-The-Logs

This script enhances endpoint logging telemetry for the purpose of advanced malware threat detection or for building detections or malware analysis. This can be used in production, however you might want to tune the GPO edits as needed.

Invoke-Mathfuscation

A quick command line utility that generates uses simple addition to obfuscate individual characters, then executes it

fake_systeminfo

Generate a fake "systeminfo.exe" binary in order to hide the presence of a VM

Format-String-Deobfuscator

Deobfuscates PowerShell format strings

Invoke-XORfuscation

Generate obfuscated PowerShell commands using XOR logic with random keys!

Process-Suspender

A quick PowerShell utility which launches and immediately suspends a provided process for a specified amount of time.

Windows-Sandbox-Flare-VM

This config file will automatically convert a temporary Windows Sandbox environment into a Flare VM for malware analysis.

Py-BATCH-Fuscator

A Python script which simply obfuscates batch scripts by messing with the encoding.

Heuristic-Confuser

Sandbox/Heuristic PowerShell Bypass

FT-Linux-Sysmon-Config

Sysmon Config for Linux

Ethanol-Gasoline-Octane-Calculator

A PowerShell script which calculates the octane rating of an ethanol/gasoline mixture based on percentage of ethanol, and octane rating of gasoline (ie 91 or 93)

adaway-parsed

This repo is updated to include a clean list of advertising domains from AdAway found here: https://adaway.org/hosts.txt