Feb 11, 2019 - In this essay, I describe my conjecture on how humans tend to use resources with a particular focus on how this relates to software.

• Internet
• Resources
• Economics
• Software
• Threat Intelligence

Jan 29, 2019 - A partial analysis of some obfuscated PHP.

• Threat Intelligence
• Threat Hunting
• Biblioteca

Jan 2, 2019 - An introduction to a library for fingerprinting SSL clients.

• Video
• John Althouse
• Jeff Atkinson
• JA3
• SSL
• Threat Hunting
• Malware
• Threat Intelligence
• Shmoocon

Nov 23, 2018 - API to check if a domain is in a list of the one million most visited domains.

• Domains
• Flask
• Python
• Threat Intelligence

Oct 24, 2018 - Some of my playbooks were featured in ThreatConnect's playbook Friday blogs.

• ThreatConnect
• Playbooks
• Threat Intelligence
• Google
• Google Alerts
• Robtex
• Tasks
• Task Management

Aug 16, 2018 - A site listing ThreatConnect's open-source resources.

• Hugo
• Playbooks
• Spaces Apps
• TCEX
• ThreatConnect
• Threat Intelligence

Aug 6, 2018 - Library for testing and validating the contents and structure of data in ThreatConnect.

• Python
• Software Tests
• ThreatConnect
• Threat Intelligence

Jul 30, 2018 - Helpful functions for working with indicators of compromise.

• Indicators of Compromise
• Python
• Threat Intelligence

Jun 1, 2018 - Angular2+ service for parsing indicators of compromise from text.

• Angular
• Indicators of Compromise
• Threat Intelligence

Feb 5, 2018 - Python package to find Indicators-of-Compromise in text.

• Indicators of Compromise
• Python
• Threat Intelligence

Nov 5, 2017 - Algorithm and classification system to identify and monitor Unicode domain squats which may used to target an organization.

• Angular
• API
• Django
• Domain-Squatting
• Domains
• Eve
• Flask
• Python
• Threat Intelligence
• Typescript
• Zurb Foundation

Oct 5, 2017 - Standardizing the way indicators are fanged and defanged.

• Indicators of Compromise
• Python
• Threat Intelligence

Sep 19, 2017 - Python wrapper for the Robtex API.

• Analysis
• Domains
• Indicators of Compromise
• Python
• Robtex
• Threat Intelligence

Apr 5, 2017 - Check if a domain is in the Alexa or Cisco one million domain lists.

• Domains
• Python
• Threat Intelligence

Dec 11, 2016 - Investigation of a magento malware compromise.

• Analysis
• Indicators of Compromise
• Javascript
• Malware
• Threat Intelligence