McAfee Advanced Threat Research

Repositories

• CVE-2020-16899

  CVE-2020-16899 - Microsoft Windows TCP/IP Vulnerability Detection Logic and Rule

  microsoft lua windows-10 rce suricata atr cve
  Lua 5 14 0 0 Updated Oct 14, 2020

• CVE-2020-16898

  CVE-2020-16898 (Bad Neighbor) Microsoft Windows TCP/IP Vulnerability Detection Logic and Rule

  microsoft lua windows-10 rce suricata atr cve
  Lua 18 147 0 0 Updated Oct 15, 2020

• Ripple-20-Detection-Logic

  Ripple20 Critical Vulnerabilities - Detection Logic and Signatures
  Lua 1 5 0 1 Updated Oct 14, 2020

• Yara-Rules

  Repository of YARA rules made by McAfee ATR Team

  iocs yara
  YARA Apache-2.0 32 210 2 0 Updated Oct 14, 2020

• IOCs

  Repository containing IOCs, CSV and MISP JSON from our blogs
  HTML 13 62 1 0 Updated Sep 16, 2020

• xbypass

  A tool to facilitate ROP Chain Development for XML Character Sanitization
  Python 7 18 0 0 Updated May 9, 2019

• Threat-Reports

  Repository to store the Threat Reports made by the McAfee ATR Team
  1 11 0 0 Updated Oct 11, 2018