Belgium

Maxime Thiebaut

Advanced
@0xThiebaut

DFIR & RE at @NVISOsecurity . Bringing custom tools to custom problems.

thiebaut.dev

sigmai. Import specific data sources into the Sigma generic and open signature format.

79

PCAPeek. A proof-of-concept re-assembler for reverse VNC traffic.

24

Signatures. 🚧 Currently transfering TLP:CLEAR rules from TLP:AMBER repository...

21

dnsbeat. An Elasticsearch Beat to monitor DNS zones through customizable zone transfers.

13

mdeproxy. Microsoft Defender for Endpoint Proxy (Device Timeline, ...)

5

AdaptixC2-gopher. Uses brute force to locate the configuration within an AdaptixC2's gopher agent.

2

IDA. ⚙️ Things I used in IDA...

1

dnsbeat-poc. A proof-of-concept for 0xThiebaut/dnsbeat.

1

ctfd-koth. A CTFd King of the Hill binary.

1

Zipit. A Firefox extension to encrypt files downloaded through Microsoft 365 Defender's Live Response Sessions.

1
10
Apply