Nasreddine Bencherchali

Detection Engineering | Threat Hunting | Malware Analysis | Windows Internals | DFIR

Ecosystems: Windows, Python, elasticsearch, Awesome Lists, Linux, JSON

Projects

sigma

Main Sigma Rule Repository

Python - Released: 24 Dec 2016 - 7,995

EVTX-ETW-Resources

Event Tracing For Windows (ETW) Resources

Released: 07 Aug 2021 - 342

Misc-Research

A collection of tools, scripts and personal research

Python - Released: 16 Jul 2021 - 97

MindMaps

#ThreatHunting #DFIR #Malware #Detection Mind Maps

Released: 23 Oct 2020 - 260

SEDR-Internals

Symantec EDR Internals

Released: 04 Apr 2021 - 21

Multi-Threaded-BruteForcer

A script that automates a brute-force attack on a login page

Python - Released: 06 Jul 2018 - 10

sedr-localdatastore-parser

Parser for Symantec EDR "localdatastore" folder

Python - Released: 25 Feb 2021 - 6