McAfee Advanced Threat Research

Repositories

• Yara-Rules

  Repository of YARA rules made by McAfee ATR Team

  iocs yara
  YARA Apache-2.0 46 307 1 0 Updated May 14, 2021

• ATR_HAX_CTF

  McAfee Advanced Threat Research Capture the Flag
  Python 2 6 0 0 Updated Mar 9, 2021

• Ripple-20-Detection-Logic

  Ripple20 Critical Vulnerabilities - Detection Logic and Signatures

  dns lua ipv6 rce suricata atr cve
  Lua 2 6 0 0 Updated Nov 11, 2020

• CVE-2020-16898

  CVE-2020-16898 (Bad Neighbor) Microsoft Windows TCP/IP Vulnerability Detection Logic and Rule

  microsoft lua windows-10 rce suricata atr cve
  Lua 31 206 0 0 Updated Oct 26, 2020

• CVE-2020-16899

  CVE-2020-16899 - Microsoft Windows TCP/IP Vulnerability Detection Logic and Rule

  microsoft lua windows-10 rce suricata vulnerability atr
  Lua 6 16 0 0 Updated Oct 19, 2020

• IOCs

  Repository containing IOCs, CSV and MISP JSON from our blogs
  HTML 13 67 1 0 Updated Sep 16, 2020

• xbypass

  A tool to facilitate ROP Chain Development for XML Character Sanitization
  Python 7 18 0 0 Updated May 9, 2019

• Threat-Reports

  Repository to store the Threat Reports made by the McAfee ATR Team
  1 11 0 0 Updated Oct 11, 2018