IoC with Zeek and Suricata

[ignoramous]

Indicators of Compromise, similar to what's done by TinyCheck: https://github.com/KasperskyLab/TinyCheck

See also: https://github.com/VirusTotal/yara

[ignoramous]

And: https://github.com/stamparm/maltrail

[ghost]

And: https://github.com/stamparm/maltrail

Nice feature to add on RDNS 😍😍😍😍😍

[ignoramous]

See:

• https://github.com/stratosphereips/StratosphereLinuxIPS
• https://github.com/AssoEchap/stalkerware-indicators
• https://github.com/stratosphereips/ip_enrich
• https://github.com/Te-k/harpoon
• https://github.com/mvt-project/mvt
• https://github.com/MobSF/Mobile-Security-Framework-MobSF
• https://github.com/Pithus/bazaar
• https://github.com/Te-k/apkcli
• https://github.com/netbirdio/netbird/pull/1124 (jumpcloud)