Pinned

Check Which APT Group Targets your Organization

Today we will see how to identify which APT Group is interested in your organization to attack. There are few requirements is required to identify this. Which region your organization is located ? Which type of industry / Sector ? In which region your providing services? In which sector your service providers are? There are the four information is required to identify the APT Groups. Let’s Start Goto — https://lab52.io/

Threat Intelligence

1 min read

Check Which APT Group Targets your Organization

Today we will see how to identify which APT Group is interested in your organization to attack.

There are few requirements is required to identify this.

Which region your organization is located ?
Which type of industry / Sector ?
In which region your providing services?
In which sector your service providers are?

There are the four information is required to identify the APT Groups.

Let’s Start

Goto — https://lab52.io/

After choosing all the options and you can click on Search to get the APT Group names and IOC’s of all the threat actors.

Pinned

My Threat Intelligence Hotlist

Today I am going to share my threat intelligence bookmarks which I use daily for various reasons. For example news feeds, IOC’s, Malware information and TTPs etc.., TI News Feeds List https://www.bleepingcomputer.com/ https://www.darkreading.com/ https://www.zdnet.com/topic/security/ https://www.theregister.com/security/ https://www.scmagazine.com/ https://www.cyberscoop.com/ https://blog.alyac.co.kr/category

Cybersecurity

1 min read

My Threat Intelligence Hotlist

Today I am going to share my threat intelligence bookmarks which I use daily for various reasons.

For example news feeds, IOC’s, Malware information and TTPs etc..,

TI News Feeds List

https://www.bleepingcomputer.com/
https://www.darkreading.com/
https://www.zdnet.com/topic/security/
https://www.theregister.com/security/
https://www.scmagazine.com/
https://www.cyberscoop.com/
https://blog.alyac.co.kr/category
https://www.techradar.com/pro/security
https://latesthackingnews.com/category/hackingnews/
https://thehackernews.com/
https://www.helpnetsecurity.com/view/news/
https://www.welivesecurity.com/
https://securityintelligence.com/

Malware Information List

https://iris-h.malwageddon.com/pages/dashboard
https://manalyzer.org/
https://id-ransomware.malwarehunterteam.com/index.php
https://malware.lu/articles/
https://www.hybrid-analysis.com/
https://malshare.com/
https://www.unpac.me/
https://any.run/malware-trends/
https://github.com/Dump-GUY/Malware-analysis-and-Reverse-engineering

Additional List Available in below link for Malware Samples

https://zeltser.com/malware-sample-sources/

Att&ck Framework List

https://mitre-attack.github.io/attack-navigator/
https://github.com/mitre/caldera
https://redcanary.com/blog/red-canary-and-mitre-attack/

Threat Intelligence Tools

https://github.com/hslatman/awesome-threat-intelligence

OSINT — Start ME

https://start.me/p/7kxyy2/osint-tools-curated-by-lorand-bodo
https://start.me/p/L1rEYQ/osint4all

Hope it helps!!!
If any URL which needs to add here please mention in comments.

Thanks for Reading.

Pinned

SSDEEP — Fuzzy Hashing

They are different hashing we use like Md5, SHA1, SHA256 and SHA512 etc., when it is come to malware detection most of the AV will detect based on the signatures, which contains hash information as a one of the key element for malwares. So, to avoid detecting from the AV…

Malware

3 min read

11 hours ago

Third-Party Risk Assessment using Maltego

As a Threat Intelligence Analyst we are required to monitor the third-party product used by our organization for any vulnerabilities which is required to notified to security team. Also, we need to create the watchlist for those product and services to monitor the existing vulnerability list. I am searching for…

Cybersecurity

2 min read

Third-Party Risk Assessment using Maltego

Jul 26

How to identify your Email Credential Leaked Information

Hello Everyone. We are going to see how to identify the email leaked information using some well known tools. I Hope you’re familiar with most of the tools which I am going to mention here. First https://haveibeenpwned.com/ The most popular tool, and you can use it in two ways. Like…

Threat Intelligence

2 min read

How to identify your Email Credential Leaked Information

Jun 14

Know Your Threat Actor using Unit42 — ATOM

While reading the threat news feeds today, I randomly visited one good online portal from Unit 42 team. which has good information about the Threat Actor Profile and Malware information, so I thought to share some insight about Unit 42 ATOM here. Unit 42 is a threat intelligence team from…

Threat Intelligence

2 min read

Know Your Threat Actor using Unit42 — ATOM

Jun 8

Cross Platform Threat Hunting Rule Conversation

Today we are going to see how to convert the threat hunting rules from different formats. I am going to use the Sigma Rule is the base rule, because it is open and most of the rule author contributing more in Sigma Rule. Here is the below link, which has…

Threat Intelligence

1 min read

Cross Platform Threat Hunting Rule Conversation

May 18

The Automated Phishing Analysis

ThePhish is an automated phishing email analysis tool based on TheHive, Cortex and MISP. In this article, i will show you how to deploy the automated phishing analysis tool in AWS using Lightsail. About ThePhish Tool, Any user can forward the suspicious email to the ThePhish for email analysis. ThePhish will also create…

Cyber

8 min read

ThePhish — TheHive — Cortex — MISP — Phishing Analysis

Jan 6

Threat Intelligence as a Service

Cyber-threat intelligence service integrates with combination of multiple open source and commercial threat intelligence to provide early warnings to the organizations and customers. So cyber-threat intelligence is an information that can helps an organization to identify, assess, monitor, and respond to the cyber-threats. Intelligence TIaaS provide STRATEGIC INTELLIGENCE Customer specific advisory: Threat intelligence team…

Threat Intelligence

2 min read