{"repo":"BushidoUK/Ransomware-Tool-Matrix","free":true,"listed":false,"github":"https://github.com/BushidoUK/Ransomware-Tool-Matrix","clone":"git clone https://github.com/BushidoUK/Ransomware-Tool-Matrix.git","description":"A resource containing all the tools each ransomware gangs uses","language":null,"stars":1430,"topics":["cti","cybersecurity","detection-engineering","hacking","osint","ransomware","threat-hunting","threat-intelligence","threatintel"],"license":null,"category":"security-tools","readme_excerpt":"Ransomware Tool Matrix - This repository contains a list of which tools each ransomware gang or extortionist gang uses - As defenders, we should exploit the fact that many of the tools used by these cybercriminals are often reused - We can threat hunt, deploy detections, and block these tools to eliminate the ability of adversaries to launch intrusions - This project will be updated as additional intelligence on ransomware gang TTPs is made available - Feel free to watch my presentation on this project at BSides London in December 2024. [!TIP] This Ransomware Tool Matrix has several use cases, which are as follows: - As a list of leads for threat hunting inside the environments available to you - As a list of leads to look for during incident response engagements - As a checklist of tools to identify patterns of behaviour between certain ransomware affiliates - As an adversary emulation resource for threat intelligence-led purple team engagements Ransomware Tool Matrix - RMM Tools - Exfiltration Tools - Credential Theft Tools - Defense Evasion Tools - Networking Tools - Discovery Tools - Offensive Security Tools - Living-off-the-Land Binaries and Scripts Threat Intel Sources - List of CISA's Threat Groups - List of The DFIR Report's Threat Groups - List of Trend Micro's Threat Groups - Common TTPs of the Modern Ransomware Groups by Kaspersky - The Conti Playbook - The Bassterlord Networking Manual - Extra Threat Intel Additional Resources - List of Tools used by +10 Ransomwar","default_branch":null,"files":null,"tree":[],"storefront":"/r/BushidoUK","claimed":false,"request_supported":{"post":"https://gitbuyer.com/r/BushidoUK/Ransomware-Tool-Matrix/request-supported","requests":0},"note":"indexed from public GitHub; nothing is for sale on this page. Clone it from GitHub. Paid listings live at /search."}