Secureworks - Collabfiltrator: Difference between revisions

From GCA ACT
Jump to navigationJump to search
(Created via script)
 
(No difference)

Latest revision as of 09:44, 27 October 2023

Description


Collabfiltrator is a tool used to help identify possible malicious collaboration among adversaries. It does this by first identifying communication channels between systems, then inspecting the traffic for indicators of suspicious or malicious activity. This tool can be used to help analysts understand the relationships and communications between adversaries, and can also be used to help identify potential new threats.

More Information


https://github.com/0xC01DF00D/Collabfiltrator