https://github.com/blackberry/threat-research-and-intelligence

BlackBerry Threat Research & Intelligence
https://github.com/blackberry/threat-research-and-intelligence

artificial-intelligence iocs machine-learning research sigma-rules suricata-rules threatintelligence yara-rules

Last synced: 5 months ago
JSON representation

BlackBerry Threat Research & Intelligence

• Host: GitHub
• URL: https://github.com/blackberry/threat-research-and-intelligence
• Owner: blackberry
• License: apache-2.0
• Created: 2021-08-19T12:09:46.000Z (almost 5 years ago)
• Default Branch: main
• Last Pushed: 2023-10-20T17:57:32.000Z (over 2 years ago)
• Last Synced: 2024-04-09T14:59:54.240Z (about 2 years ago)
• Topics: artificial-intelligence, iocs, machine-learning, research, sigma-rules, suricata-rules, threatintelligence, yara-rules
• Language: Jupyter Notebook
• Homepage:
• Size: 20.3 MB
• Stars: 88
• Watchers: 13
• Forks: 14
• Open Issues: 0
• Metadata Files:
  • Readme: README.md
  • License: LICENSE

Awesome Lists containing this project

README

          
![image](https://user-images.githubusercontent.com/7794663/217848699-225cb469-e4f7-434f-9413-3dbb499bd1ff.png)

---



[Full Intelligence Blogs][bbblogs]   |   [Blog Outcomes][blogs]   |   [Report Outcomes][reports]   |   [Public Talks][btalks]   



---

# :information_source: :: Overview

This repository is for the dissemination of IOCs, YARA rules and source code from threat intelligence reports published by the BlackBerry Threat Research & Intelligence team.

- For fully detailed reports including screenshots :arrow_right: [Click here][bbblogs]

- For brief blog style reports with assosciated IOCs :arrow_right: [Click here][blogs]

- For summaries and IOCs of fully detailed reports :arrow_right: [Click here][reports]

# :mag: :: YARA Rules

YARA rules are uploaded when available to each respective blog / report folder, however if you wish to download only the rules, you can do so from the dedicated repo [here][yara_repo]. YARA Rules are to be used in accordance with the specified [LICENSE](LICENSE).

# :sos: :: BlackBerry Assistance

If you’re battling malware or a threat, you’ve come to the right place, regardless of your existing BlackBerry relationship.

[The BlackBerry Incident Response team](https://www.blackberry.com/us/en/services/incident-response) is made up of world-class consultants dedicated to handling response and containment services for a wide range of incidents, including ransomware and Advanced Persistent Threat (APT) cases.

We have a global consulting team standing by to assist you, providing around-the-clock support where required, as well as local assistance.  

  

Contact us [here][ir_contact]. 

# :book: :: About the team

The BlackBerry Research & Intelligence team examines emerging and persistent threats, providing intelligence analysis for the benefit of defenders and the organisations they serve.

# :memo: :: License

threat-research-and-intelligence is distributed under the Apache License. See [LICENSE](LICENSE) for more information.

[bbblogs]:https://blogs.blackberry.com/en/category/research-and-intelligence

[blogs]:https://github.com/blackberry/threat-research-and-intelligence/tree/main/Blogs%20%26%20Reports/Blogs

[reports]:https://github.com/blackberry/threat-research-and-intelligence/tree/main/Blogs%20%26%20Reports/Reports

[yara_repo]:https://github.com/blackberry/threat-research-and-intelligence/search?l=yara

[ir_contact]:https://www.blackberry.com/us/en/forms/cylance/handraiser/emergency-incident-response-containment

[btalks]:https://github.com/blackberry/threat-research-and-intelligence/tree/main/Talks