APT & CyberCriminal Campaign Collection

Elastic Security detection content for Endpoint

Living Off The Land Drivers

A static analyzer for PE executables.

sandbox approach for malware developers and red teamers to test payloads against detection mechanisms before deployment

Extracted Yara rules from Windows Defender mpavbase and mpasbase

A repository of code signing certificates known to have been leaked or stolen, then abused by threat actors