Helpful Links
Cybersecurity Resources
We are grateful to the cybersecurity community members that create and/or curate content and IOCs to share with others. Also, for the organizations that host threat exchange platforms to facilitate free access to community-sourced data. Malware Patrol publishes indicators on Alien Vault OTX.
Helpful Links
Our team compiled a list of cybersecurity resources that they have used or saved during the course of their work. These links are organized by category and shared below. Due to the vast amount of information to which these links lead, Malware Patrol cannot endorse them or ensure their accuracy however.
Feel free to contact us if you have additional resources to suggest.
DDoS
Malware
Awesome Malware Analysis (rshipp)
Banking Trojans: A Reference Guide to the Malware Family Tree (F5 Labs)
BinDiff and BinNavi Reverse Engineering Software (Zynamics)
Explained: Packer, Crypter, and Protector (Malwarebytes)
Free Malware Sample Sources for Researchers (Lenny Zeltser)
Malware Naming (Microsoft)
Malware Reports (SecureList)
Malware Information Sharing Platform (MISP)
Trickbot – An analysis of data collected from the botnet (GovCERT.ch)
What are exploits? (And why you should care) (Malwarebytes)
Why Domain Generating Algorithms (DGAs)? (TrendMicro)
Ransomware
Before You Pay that Ransomware Demand (Brian Krebs)
Free Ransomware Decryption Tools – AVAST
Free Ransomware Decryption Tools – BITDEFENDER
Free Ransomware Decryption Tools – CRYPTOSTOPPERS
Free Ransomware Decryption Tools – EMSISOFT
Free Ransomware Decryption Tools – HEIMDAL SECURITY
Free Ransomware Decryption Tools – KASPERSKY
A History of Ransomware Attacks (DigitalGuardian)
Ransomware Detection and Decryption Tools (VinRansomware)
Ransomware Listing (NJCCIC)
DNS
Building a DNS Blackhole with FreeBSD
A Cartoon Intro to DNS Over HTTPS
DNS Privacy Frequently Asked Questions (FAQ) (InternetSociety.org)
DNS Response Policy Zone (RPZ) (Barry Greene/Vernon Schryver)
DNS Security (Part 1): Issues in DNS Security (TechGenix)
DNS Tools – Ping, Traceroute, DNS Lookup (DomainTools)
Phishing
6 Common Phishing Attacks (TripWire)
FTC Guidance for Handling Phishing Scams (National Law Review)
A Technical Demonstration of an Email Phishing Attack (Bsides Philly)
Typosquatting: Awareness and Hunting (SANS)
What is Phishing? (Phishing.org)
Research & Tools
10 Free or Low-Cost Security Tools (Dark Reading)
51 Tools for Security Analysts (WordFence)
ATT&CK for Industrial Control Systems (MITRE)
The Book of Secret Knowledge (@trimstray, Github)
Community Tools (Crowdstrike)
CSIRT Services Framework (FIRST)
Database Security Tools (Infosec Institute)
Free & Open Source Computer Forensics Tools (Infosec Institute)
Online Security Classes (Open Security Training)
OSINT IntelTechniques (Michael Bazzell)
OWASP (OWASP)
Pentest Tools (Carrie Roberts/Tripwire)
SANS Investigative Forensic Toolkit (SIFT)
Security APIs (Alexander Jäger)