Neo23x0 Follow

Florian Roth Neo23x0

#DFIR #Python #YARA #Golang #SIEM #SOC #Sigma #Malware

1.8k followers · 15 following · 122

Highlights

Arctic Code Vault Contributor

Pinned

Loki

Loki - Simple IOC and Incident Response Scanner

Python 1.6k 385
sigma

Generic Signature Format for SIEM Systems

Python 2.7k 726
NextronSystems/APTSimulator

A toolset to make a system look as if it was the victim of an APT attack

Batchfile 1.2k 264
yarGen

yarGen is a generator for YARA rules

Python 673 154
munin

Online hash checker for Virustotal and other services

Python 439 84
Fnord

Pattern Extractor for Obfuscated Code

Java 226 38

687 contributions in the last year

Contribution activity

July 2020

Neo23x0/ATTACK-Python-Client Jupyter Notebook Jul 14
Neo23x0/panopticon Python Jul 2

Created a pull request in hunters-forge/ATTACK-Python-Client that received 2 comments

Jul 14

Add requirements.txt

+1 −0 • 2 comments

Pr/919 Jul 15
improved CVE-2020-1350 rule Jul 15
rule: CVE-2020-1350 Jul 15
fix: issue reported as https://github.com/Neo23x0/sigma/issues/923 Jul 14
Live MITRE ATT&CK data from TAXI service in Test Scripts Jul 14
refactor: ignore sub techniques as long as we do not have a complete … Jul 14
References Test Jul 13
New Empire Rules and Updates Jul 13
rule: regsvr32 flags anomaly Jul 13
rule: improved Citrix rule Jul 10
rule: Citrix Netscaler Attack CVE-2020-8193 CVE-2020-8195 Jul 10
Rule devel Jul 10
rule: extended F5 BIG-IP exploitation detection rule Jul 7
improved F5 BIG-IP rule based on private feedback Jul 5
rule: CVE-2020-5902 F5 BIG-IP Exploitation Attempt Jul 5
Windows Curl Rules Jul 3
fix: trailing whitespace Jul 3
Rule devel Jul 3
fix: typo in systemroot Jul 3
fix: missing copy command Jul 3
DesktopImgDownLdr Rules and extra rule Jul 3
fix: duplicate IDs and rule titles Jul 1
fix: remove duplicate rules in sysmon (generic rule cleanup) Jul 1
Rule devel Jul 1

ProxyEnable Setting in Registry Jul 3

Created an issue in reversinglabs/reversinglabs-yara-rules that received 1 comment

Jul 7

Missing `master` branch

Something happened to your master branch. People started noticing it since I use download links to packages generated from that branch. I don't kno…

1 comment

Output: All Possible Casing Variations of a String Jul 2

Create your own GitHub profile