Malware sample library.
-
Updated
Nov 21, 2023 - C++
#
apt29
Here are 13 public repositories matching this topic...
Splunk app to compare Endpoint Detection and Response solutions based on MITRE ATT&CK evaluations (APT3, APT29, Carbanak + FIN7, Wizard Spider + Sandworm)
-
Updated
Sep 5, 2022
Tracking the Solarwinds Hack.
microsoft security sunspot solarwinds sunburst fireeye crowdstrike supernova cisa apt28 apt29 unc2452 solorigate sandworm sunshuttle cosmicgale goldmax sibot goldfinder
-
Updated
May 3, 2021
Dive into detailed technical analysis of critical vulnerabilities and malware. Stay informed, contribute, and help us improve cybersecurity together.
osint apt exploit malware cybersecurity malware-analysis forensic-analysis ioc-development zero-day malware-detection cyber-threat-intelligence apt29 cybersecurity-education forensics-tools zero-day-exploit
-
Updated
May 13, 2025
apt-emulation-platform
python lazarus apt cybersecurity ransomware infosec threat-hunting offensive-security security-automation security-tools redteam mitre-attack apt29
-
Updated
Jul 8, 2026 - Python
This repository contains validated detection rules for adversary behaviors observed during APT29 simulation. Each rule was tested against the actual attack data, converted to Splunk SPL, and validated for false positives.
yaml splunk sysmon threat-hunting soc powershell-attack mitre-attack threat-detection apt29 sigma-rules lsass-dump
-
Updated
Jul 10, 2026
APT infrastructure intelligence and IOC tracking platform
ioc osint apt blocklist malware cybersecurity threat-hunting firehol threat-intelligence pihole threat-intelligence-database apt28 apt29 threat-intelligence-data threat-intelligence-feeds
-
Updated
Sep 1, 2026 - Python
decompilation and static-analysis on the prevalent hermeticwiper
-
Updated
Apr 26, 2024 - C
Structured incident investigations and threat hunting playbooks mimicking real-world APT tradecraft like APT29 and FIN7.
-
Updated
Jun 25, 2026
Audit Google Workspace for App-Specific Passwords that bypass MFA (the UNC6293/APT29 Gmail attack vector). Admin SDK enumeration, reporting, and bulk revocation.
-
Updated
Jun 29, 2026 - Python
Red team exercises and threat emulation projects — APT29 full kill-chain simulation and APT28 spearphishing emulation, mapped to MITRE ATT&CK.
cybersecurity penetration-testing sliver ethical-hacking red-team mitre-attack threat-emulation apt28 apt29 kill-chain
-
Updated
May 7, 2026
Evidence-driven Windows incident investigation using the OTRF APT29 dataset: Sysmon, PowerShell, persistence, credential access, WinRM/PsExec lateral movement, threat hunting and Sigma detections.
powershell incident-response dfir sysmon threat-hunting sigma soc blue-team mitre-attack apt29 lateral-movement windows-forensics
-
Updated
Aug 27, 2026 - PowerShell
Add this topic to your repo
To associate your repository with the apt29 topic, visit your repo's landing page and select "manage topics."