sssnake/autarch
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

Add Android forensics, IOC threat-intel DB, Compose companion; scrub secrets from configs

Browse Source
This commit is contained in:
SsSnake
2026-07-13 15:45:47 -07:00
parent 925216290f
commit e48d577bd5
387 changed files with 211976 additions and 921 deletions
Download Patch File Download Diff File Expand all files Collapse all files

1
data/ioc/spyware/citizen_lab/201909_MissingLink/snort.rules Normal file
View File

@@ -0,0 +1 @@
alert tcp $HOME_NET any -> $EXTERNAL_NET 10011 (msg:"MOONSHINE payload C2 activity"; flow:established,to_server; content:"GET"; content:"/ws?whisky_id|3d|"; content:"User-Agent: hots scot"; content:"Upgrade: websocket"; reference:url,https://citizenlab.ca/2019/09/poison-carp-tibetan-groups-targeted-with-1-click-mobile-exploits; classtype:trojan-activity; sid:3000003; rev:1;)