toolsmith: Violent Python - A Book Review Applied to Security Analytics
Tags
country: China
attack-pattern: Data Dns - T1071.004 Dns - T1590.002 Ip Addresses - T1590.005 Malware - T1587.001 Malware - T1588.001 Mine Social Media - T1273 Powershell - T1059.001 Python - T1059.006 Tool - T1588.002 Powershell - T1086 Scripting - T1064 Scripting
Show in Graph
Common Information
Type Value
UUID f1be0968-1eb3-4cdc-b6e9-ced5a40f22ca
Fingerprint a091099145b6bb94
Analysis status DONE
Considered CTI value 0
Text language
Published Jan. 3, 2013, 9:25 a.m.
Added to db Jan. 18, 2023, 9:47 p.m.
Last updated Sept. 2, 2024, 10:34 p.m.
Headline UNKNOWN
Title toolsmith: Violent Python - A Book Review Applied to Security Analytics
Detected Hints/Tags/Attributes 55/2/17
Source URLs
Redirection Url
Details Source https://holisticinfosec.blogspot.com/2013/01/toolsmith-violent-python-book-review.html
URL Provider
Details Provider Source level domain
Details blogspot.com holisticinfosec.blogspot.com
Attributes
Details Type #Events CTI Value
Details Domain 1 
geoprint.py
Details Domain 1 
pdfread.py
Details Domain 1 
ax19.cn
Details Domain 2 
geolite.maxmind.com
Details Domain 1 
win32.banload.mc
Details Domain 1 
anongoogle.py
Details Domain 1 
www.ax19.cn
Details File 1 
geoprint.py
Details File 1 
pdfread.py
Details File 2 
geolite.max
Details File 2 
geolitecity.dat
Details File 2 
pygeoip.geo
Details File 2 
suspect.pdf
Details File 1 
anongoogle.py
Details IPv4 1 
192.168.248.114
Details IPv4 1 
116.254.188.24
Details Url 1 
http://geolite.maxmind.com/download/geoip/database/geolitecity.dat.gz