sssnake/autarch
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

Add Android forensics, IOC threat-intel DB, Compose companion; scrub secrets from configs

Browse Source
This commit is contained in:
SsSnake
2026-07-13 15:45:47 -07:00
parent 925216290f
commit e48d577bd5
387 changed files with 211976 additions and 921 deletions
Download Patch File Download Diff File Expand all files Collapse all files

41
data/ioc/spyware/citizen_lab/201808_FamiliarFeeling/indicators.csv Normal file
View File

@@ -0,0 +1,41 @@
uuid,event_id,category,type,value,comment,to_ids,date
5a71edfd-1054-4f90-b881-09238e96ca05,133,Network activity,domain,"tibetnews.info","",1,20180131
5a71edfd-1460-419f-bf27-09238e96ca05,133,Network activity,domain,"tibetnews.today","",1,20180131
5a71edfd-2d74-416f-b7f1-09238e96ca05,133,Network activity,domain,"daynew.today","",1,20180131
5a71edfd-3760-46ea-ac88-09238e96ca05,133,Network activity,domain,"daynews.today","",1,20180131
5a71edfd-5044-404c-8b48-09238e96ca05,133,Network activity,domain,"commail.co","",1,20180131
5a71edfd-65f0-498f-8143-09238e96ca05,133,Network activity,domain,"comemail.email","",1,20180131
5a71edfd-6f60-4192-8e0f-09238e96ca05,133,Network activity,domain,"tibethouse.info","",1,20180131
5a71edfd-f620-4e5f-bc15-09238e96ca05,133,Network activity,domain,"tibetfrum.info","",1,20180131
5a71edfd-f73c-4213-9784-09238e96ca05,133,Network activity,domain,"comemails.email","",1,20180131
5b657bbb-48f4-4cc2-a236-72cf8064ab0b,133,Network activity,ip-dst,"27.126.186.222","",1,20180804
5b657bbb-9bdc-4b23-b160-72cf8064ab0b,133,Network activity,ip-dst,"115.126.86.151","",1,20180804
5b657bbb-d594-49ae-8e85-72cf8064ab0b,133,Network activity,ip-dst,"45.127.97.222","",1,20180804
5b657bbb-e338-4722-af6a-72cf8064ab0b,133,Network activity,ip-dst,"103.55.24.196","",1,20180804
5b657bbb-eed0-4569-a919-72cf8064ab0b,133,Network activity,ip-dst,"203.189.232.207","",1,20180804
5b657bbb-f600-4013-bb4b-72cf8064ab0b,133,Network activity,ip-dst,"27.126.176.169","",1,20180804
5b657c1b-46f4-4103-9646-72cb8064ab0b,133,Network activity,domain,"google.comemails.email","",1,20180804
5b657c1b-5dc0-4f64-8569-72cb8064ab0b,133,Network activity,domain,"www.google.comemails.email","",1,20180804
5b657c1b-7ab4-4be5-bdfa-72cb8064ab0b,133,Network activity,domain,"google.commail.co","",1,20180804
5b657c1b-7b50-4ccb-8487-72cb8064ab0b,133,Network activity,domain,"www.comemail.email","",1,20180804
5b657c1b-8868-476a-ad15-72cb8064ab0b,133,Network activity,domain,"mail.google.commail.co","",1,20180804
5b657c1b-9da8-4d2a-be4e-72cb8064ab0b,133,Network activity,domain,"google.commail.email","",1,20180804
5b657c1b-de48-4c26-a83a-72cb8064ab0b,133,Network activity,domain,"google.comemail.email","",1,20180804
5b657c33-0f28-4582-acc2-72cd8064ab0b,133,Attribution,whois-registrant-email,"bqfkdrmnhh0623@gmail.com","",0,20180804
5b657c43-9d0c-49d7-97a8-72cc8064ab0b,133,Attribution,whois-registrant-name,"huang ning","",0,20180804
5b657c55-0d84-46ef-9e3b-167e8064ab0b,133,Attribution,whois-registrant-phone,"8677687877","",0,20180804
5b657c65-3318-46b2-9cd8-15688064ab0b,133,Artifacts dropped,md5,"75b86a01196854919626e87d5bd45a38","",0,20180804
5b657c65-56dc-4bb8-800d-15688064ab0b,133,Artifacts dropped,md5,"054bad7ec0e19cec931078d45382fee6","",0,20180804
5b657c65-5c00-46f9-b147-15688064ab0b,133,Artifacts dropped,md5,"88e85fb6074ae50a3ccc9b410805ffe5","",0,20180804
5b657c65-7318-4bf3-8278-15688064ab0b,133,Artifacts dropped,md5,"058a5d47f8834fccfff8971f0544e387","",0,20180804
5b657c65-7f80-448a-992b-15688064ab0b,133,Artifacts dropped,md5,"57ffde3504934e25904bcc57d27f9217","",0,20180804
5b657c65-86ec-442d-b077-15688064ab0b,133,Artifacts dropped,md5,"4d85904b15c0adc8664f71bc2c5496bf","",0,20180804
5b657c65-8bcc-4a7e-aa47-15688064ab0b,133,Artifacts dropped,md5,"124c475d67aa8391f5220efcc64ca5b3","",0,20180804
5b657c65-9788-4a4c-b5a9-15688064ab0b,133,Artifacts dropped,md5,"c25acaa45b0cf65a39c8413fa99e1fe8","",0,20180804
5b657c65-b82c-4e03-aa1b-15688064ab0b,133,Artifacts dropped,md5,"b1c114ae9172a3bacc5c6b30c410f354","",0,20180804
5b657c65-cb5c-4c8a-b8db-15688064ab0b,133,Artifacts dropped,md5,"72c88c4a9d2316b266a6702374411a99","",0,20180804
5b657c65-f658-4b36-9ac8-15688064ab0b,133,Artifacts dropped,md5,"91e976f76cc027931fed4cf70702efff","",0,20180804
5b657d14-0654-4e9b-b833-72cf8064ab0b,133,Artifacts dropped,md5,"e1b03f5837533ecc9a05e19650d68e1d","",0,20180804
5b657d14-2854-4f64-9d64-72cf8064ab0b,133,Artifacts dropped,md5,"67e866c461c285853b225d2b2c850c4f","",0,20180804
5b657d14-8f34-41e0-ba68-72cf8064ab0b,133,Artifacts dropped,md5,"11e0f3e1c7d8855ed7f1dcfce4b7702a","",0,20180804
5b657d2e-f628-4a1e-b142-72cb8064ab0b,133,Payload delivery,email-src,"tibetanparliarnent@yahoo.com","",0,20180804
1 uuid event_id category type value comment to_ids date
2 5a71edfd-1054-4f90-b881-09238e96ca05 133 Network activity domain tibetnews.info 1 20180131
3 5a71edfd-1460-419f-bf27-09238e96ca05 133 Network activity domain tibetnews.today 1 20180131
4 5a71edfd-2d74-416f-b7f1-09238e96ca05 133 Network activity domain daynew.today 1 20180131
5 5a71edfd-3760-46ea-ac88-09238e96ca05 133 Network activity domain daynews.today 1 20180131
6 5a71edfd-5044-404c-8b48-09238e96ca05 133 Network activity domain commail.co 1 20180131
7 5a71edfd-65f0-498f-8143-09238e96ca05 133 Network activity domain comemail.email 1 20180131
8 5a71edfd-6f60-4192-8e0f-09238e96ca05 133 Network activity domain tibethouse.info 1 20180131
9 5a71edfd-f620-4e5f-bc15-09238e96ca05 133 Network activity domain tibetfrum.info 1 20180131
10 5a71edfd-f73c-4213-9784-09238e96ca05 133 Network activity domain comemails.email 1 20180131
11 5b657bbb-48f4-4cc2-a236-72cf8064ab0b 133 Network activity ip-dst 27.126.186.222 1 20180804
12 5b657bbb-9bdc-4b23-b160-72cf8064ab0b 133 Network activity ip-dst 115.126.86.151 1 20180804
13 5b657bbb-d594-49ae-8e85-72cf8064ab0b 133 Network activity ip-dst 45.127.97.222 1 20180804
14 5b657bbb-e338-4722-af6a-72cf8064ab0b 133 Network activity ip-dst 103.55.24.196 1 20180804
15 5b657bbb-eed0-4569-a919-72cf8064ab0b 133 Network activity ip-dst 203.189.232.207 1 20180804
16 5b657bbb-f600-4013-bb4b-72cf8064ab0b 133 Network activity ip-dst 27.126.176.169 1 20180804
17 5b657c1b-46f4-4103-9646-72cb8064ab0b 133 Network activity domain google.comemails.email 1 20180804
18 5b657c1b-5dc0-4f64-8569-72cb8064ab0b 133 Network activity domain www.google.comemails.email 1 20180804
19 5b657c1b-7ab4-4be5-bdfa-72cb8064ab0b 133 Network activity domain google.commail.co 1 20180804
20 5b657c1b-7b50-4ccb-8487-72cb8064ab0b 133 Network activity domain www.comemail.email 1 20180804
21 5b657c1b-8868-476a-ad15-72cb8064ab0b 133 Network activity domain mail.google.commail.co 1 20180804
22 5b657c1b-9da8-4d2a-be4e-72cb8064ab0b 133 Network activity domain google.commail.email 1 20180804
23 5b657c1b-de48-4c26-a83a-72cb8064ab0b 133 Network activity domain google.comemail.email 1 20180804
24 5b657c33-0f28-4582-acc2-72cd8064ab0b 133 Attribution whois-registrant-email bqfkdrmnhh0623@gmail.com 0 20180804
25 5b657c43-9d0c-49d7-97a8-72cc8064ab0b 133 Attribution whois-registrant-name huang ning 0 20180804
26 5b657c55-0d84-46ef-9e3b-167e8064ab0b 133 Attribution whois-registrant-phone 8677687877 0 20180804
27 5b657c65-3318-46b2-9cd8-15688064ab0b 133 Artifacts dropped md5 75b86a01196854919626e87d5bd45a38 0 20180804
28 5b657c65-56dc-4bb8-800d-15688064ab0b 133 Artifacts dropped md5 054bad7ec0e19cec931078d45382fee6 0 20180804
29 5b657c65-5c00-46f9-b147-15688064ab0b 133 Artifacts dropped md5 88e85fb6074ae50a3ccc9b410805ffe5 0 20180804
30 5b657c65-7318-4bf3-8278-15688064ab0b 133 Artifacts dropped md5 058a5d47f8834fccfff8971f0544e387 0 20180804
31 5b657c65-7f80-448a-992b-15688064ab0b 133 Artifacts dropped md5 57ffde3504934e25904bcc57d27f9217 0 20180804
32 5b657c65-86ec-442d-b077-15688064ab0b 133 Artifacts dropped md5 4d85904b15c0adc8664f71bc2c5496bf 0 20180804
33 5b657c65-8bcc-4a7e-aa47-15688064ab0b 133 Artifacts dropped md5 124c475d67aa8391f5220efcc64ca5b3 0 20180804
34 5b657c65-9788-4a4c-b5a9-15688064ab0b 133 Artifacts dropped md5 c25acaa45b0cf65a39c8413fa99e1fe8 0 20180804
35 5b657c65-b82c-4e03-aa1b-15688064ab0b 133 Artifacts dropped md5 b1c114ae9172a3bacc5c6b30c410f354 0 20180804
36 5b657c65-cb5c-4c8a-b8db-15688064ab0b 133 Artifacts dropped md5 72c88c4a9d2316b266a6702374411a99 0 20180804
37 5b657c65-f658-4b36-9ac8-15688064ab0b 133 Artifacts dropped md5 91e976f76cc027931fed4cf70702efff 0 20180804
38 5b657d14-0654-4e9b-b833-72cf8064ab0b 133 Artifacts dropped md5 e1b03f5837533ecc9a05e19650d68e1d 0 20180804
39 5b657d14-2854-4f64-9d64-72cf8064ab0b 133 Artifacts dropped md5 67e866c461c285853b225d2b2c850c4f 0 20180804
40 5b657d14-8f34-41e0-ba68-72cf8064ab0b 133 Artifacts dropped md5 11e0f3e1c7d8855ed7f1dcfce4b7702a 0 20180804
41 5b657d2e-f628-4a1e-b142-72cb8064ab0b 133 Payload delivery email-src tibetanparliarnent@yahoo.com 0 20180804