Category Custom Tooling

Threat Hunting, Custom Tooling

Python Threat Hunting Tools Part 7 — Parsing CSV

Discover how to extract data from a CSV file to analyze it and turn it into threat intelligence or IOCs to hunt for in your environment.

Adam Goss
12 June 2023

Threat Hunting, Custom Tooling

Python Threat Hunting Tools Part 6 — Creating EXEs from Python Files

Discover how to create standalone executable programs from your Python scripts that you can use on any Windows operating system using the Python module py2exe.

Adam Goss
5 June 2023

Threat Hunting, Custom Tooling

Python Threat Hunting Tools: Part 5 — Command Line Arguments

Learn how to give your threat hunting tools command line arguments that modify their behavior when they are executed.

Adam Goss
31 May 2023

Threat Hunting, Custom Tooling

Python Threat Hunting Tools: Part 4 — Browser Automation

Python Threat Hunting Tools - Browser Automation

Learn to use browser automation to automate the threat intelligence process when API access is not available or behind a paywall.

Adam Goss
22 May 2023

Threat Hunting, Custom Tooling

Python Threat Hunting Tools: Part 3 — Interacting with APIs

Welcome back to this series on building threat hunting tools! Today how interacting with APIs can help us threat hunt.

Adam Goss
15 May 2023

Threat Hunting, Custom Tooling

Python Threat Hunting Tools: Part 2 — Web Scraping

Learn about web scraping and to create your own tool to scrape threat intelligence from CISA's weekly vulnerability summary.

Adam Goss
8 May 2023

Threat Hunting, Custom Tooling

Python Threat Hunting Tools: Part 1 — Why?

Learn how to build your own threat hunting tools with Python in this new series! First, let’s find out why it is important to build your own tools.

Adam Goss
1 May 2023

Threat Intelligence, Custom Tooling

Let Us Find Out Whodunit

Whodunit is a tool that can be used to identify the most likely Advanced Persistent Threat group responsible for an attack. Let's find out how to use it!