Yara
Posted inDETECT SOC Analyst BLUE TEAM

Yara

"The pattern matching swiss knife for malware researchers (and everyone else)"  Useful Yara Resources Various Github repositories provide a wealth of examples of YARA, https://github.com/Yara-Rules/rules/tree/master/malware https://github.com/mikesxrs/Open-Source-YARA-rules/tree/masterUseful Yara Rules Repositories The DFIR…
Posted inZyberAttacks

Decoding

Most commonly used text encoding methods: base64 hex rot13 Base64 Identifying Base64: base64 encoded strings are easily spotted since they only contain alpha-numeric characters. However, the most distinctive feature of base64 is its…