A repository of IoC lists to use for threat hunting queries
File | Source | Last updated | Comment |
---|---|---|---|
netcraft-tlds | Cybercrime on Top Level Domains | 20/11/2023 | Top 20 TLDs selected based on incidents to sites ratio |
phishing-keywords | PwC-IR Business Email Compromise Guide, The top phishing keywords in the last 10k+ malicious emails we investigated | 04/10/2023 | Phishing subject keywords |
rmm-software | Detecting RMM tools using Microsoft Defender for Endpoint | 25/11/2023 | DeviceProcessEvents artifacts for RMM tools hunting |