valitydev/signature-base
14
0
Fork 0
mirror of https://github.com/valitydev/signature-base.git synced 2024-11-06 18:15:20 +00:00
Code Issues Actions Packages Projects Releases Wiki Activity
07b44fe78a
signature-base/iocs
History
Florian Roth 9f06d34539 Slingshot APT file hashes 
https://securelist.com/apt-slingshot/84312/
2018-03-09 16:58:04 +01:00
..
c2-iocs.txt Sofacy IOCs and YARA signature 2018-03-01 09:29:57 +01:00
falsepositive-hashes.txt First Signature Set 2016-02-15 10:22:28 +01:00
filename-iocs.txt NSA’s perspective on APT landscape - file name IOCs 2018-03-09 15:30:19 +01:00
hash-iocs.txt Slingshot APT file hashes 2018-03-09 16:58:04 +01:00
keywords.txt False Positive Reduction 2016-04-27 13:37:54 +02:00
otx-c2-iocs-ipv4.txt Fixed OTX IOCs / getall() retrieved IOCs from authors I wasn't subscribed to 2018-02-28 08:25:05 +01:00
otx-c2-iocs-ipv6.txt Fixed OTX IOCs / getall() retrieved IOCs from authors I wasn't subscribed to 2018-02-28 08:25:05 +01:00
otx-c2-iocs.txt Fixed OTX IOCs / getall() retrieved IOCs from authors I wasn't subscribed to 2018-02-28 08:25:05 +01:00
otx-filename-iocs.txt Fixed OTX IOCs / getall() retrieved IOCs from authors I wasn't subscribed to 2018-02-28 08:25:05 +01:00
otx-hash-iocs.txt Fixed OTX IOCs / getall() retrieved IOCs from authors I wasn't subscribed to 2018-02-28 08:25:05 +01:00
README.txt First Signature Set 2016-02-15 10:22:28 +01:00

README.txt 

Files in this directory will be initialised according to strings in their filename. 

The string "hash" in the filename will initialise the file as hash IOC list.
The string "filename" in the filename will initialise the file as filename IOC list.
The string "c2" in the filename will initialise the file as C2 server IOC list.