Archive of stories published by Open Threat Research

Homepage

Open in app

Open Threat Research

All

2019

2020

Roberto Rodriguez in Open Threat Research

Sep 19, 2019

Threat Hunting with ETW events and HELK — Part 1: Installing SilkETW 🏄‍♀🏄

2 responses

Roberto Rodriguez in Open Threat Research

Nov 7, 2019

Threat Hunter Playbook ⚔ + Mordor Datasets 📜 + BinderHub 🌎 = Open Infrastructure 🏗 for Open Hunts 🏹 💜

1 response

Roberto Rodriguez in Open Threat Research

Jan 11, 2020

Jupyter Notebooks 📓 from SIGMA Rules 🛡⚔️ to Query Elasticsearch 🏹

1 response

Roberto Rodriguez in Open Threat Research

Nov 13, 2019

Automate the Creation of ATT&CK Navigator Group Layer Files with Python 🐍

1 response

Roberto Rodriguez in Open Threat Research

Jul 21, 2020

Extending the Exploration and Analysis of Windows RPC Methods Calling other Functions with Ghidra 🐉, Jupyter…

Roberto Rodriguez in Open Threat Research

Dec 18, 2019

Writing an Interactive Book 📖 over the Threat Hunter Playbook 🏹 with the help of the Jupyter Book Project 💥

Roberto Rodriguez in Open Threat Research

Mar 27, 2020

Azure Sentinel To-Go! 🛒 — Part 1: A Lab with Prerecorded Data 😈 and a Custom Logs Pipeline via Azure Resource…

Jose Luis Rodriguez in Open Threat Research

Oct 28, 2020

Mapping ATT&CK Data Sources to Security Events via OSSEM 🛡⚔️

2 responses

Roberto Rodriguez in Open Threat Research

May 1, 2020

Mordor Labs 😈 — Part 1: Deploying ATT&CK APT29 Evals Environments via ARM Templates 🚀 to Create Detection Research…

1 response

Roberto Rodriguez in Open Threat Research

Jul 27, 2020

Mordor PCAPs 📡 — Part 1: Capturing Network Packets from Windows Endpoints with Network Shell (Netsh) ⚔️ and Azure…

These were the top 10 stories published by Open Threat Research; you can also dive into yearly archives: 2019, 2020.

About

Open Threat Research

Threat Hunting, Data Science & Open Source Projects

More information