soc-framework-nist-ir-v1[.]6[.]6[.]zip

soc-framework-nist-ir-v1.6.6.zip

SHA256 fbefe8a7cc6eb490fadec7b1de96b683e9f1658e310ac6631533e6fe25149d66
MD5 43fb42e5669f086f8350993eb98016e5
SHA1 dbcfe13f30536b8a04d5dc8eed3860860f2fe622
SHA512 d944f77de2b927d561c9cb50a1c7855a5fa15a74613bccec54ea8573a6c7cfdfc66ce2e9465718f630d51c2923d8cb0e2c2ad8313799ab67184d80f8832c76a3
SSDEEP 6144:FAVHo7g+qiB++QLXd37AOOgS/4Gc3tpudA0Otzp7Qo:FooDdQJE9gS/FSgrORp7Qo
TLSH
T18224C0FAA7983526C35E84B5F81C918584DE6D0BB861BAC71D808980DBE7DF4FB21346
MD5 SHA1 SHA512 SSDEEP TLSH

soc-framework-nist-ir/Author_image.png

SHA256 f92e57b7397664357d93eefd1919ad7d008db5ddb45257d3b805a04834ec476e
MD5 649ddc5e87a622c98b7979e572705781
SHA1 fbd60050ff3e215ca3ce17056aff890ae38ebd51
SHA512 ca70b7c7a4ed4f30b54566eeebd88169bdc1e9b692f01e547aa131f9394654accd0229b237efa0dcfadcc77ab07e8b02c2da6bd08affc1db7f1490cc77b91f61
SSDEEP 96:L1VYz07csopp3e2LmjX9VgRu6QsA6PjB/hr/NwFkkWoO6IN6w:5OJ3e2LmpKRuSAKjjr/NDt6g
TLSH
T190A16DD1D3BAE2084C6F5D9BE3710E91012AB747B43309CDE309C8AA65DA826C1A8D33
MD5 SHA1 SHA512 SSDEEP TLSH

soc-framework-nist-ir/IncidentFields/incidentfield-Analysis_Blast_Radius.json

SHA256 e6e82d5c84f1328541a089072940c8d71c72c1ea4c452bce4c0e54d87a2e59fc
MD5 60ccacb2b9fe8187057479e3fd00f303
SHA1 9c3c775f0eda1c909c1080a66535e4d0f9ea6445
SHA512 5a64652526887b5c9a2f49bf092d1344d3989775866669402ab711ebac8701ac194376eca8634da52d34cd4ee44425dc3998acc2f9dc27cb736e35724e0f76a7
TLSH
T11B319711CA1044BA06E442ED98EEC29323548E0B43483C49D3EB8C09674EF7B75F6BEE
MD5 SHA1 SHA512 TLSH

soc-framework-nist-ir/IncidentFields/incidentfield-Analysis_Case_Risk_Score.json

SHA256 03c845df48445a718024fc581efd01ff26b8e2f6cfe36d1859db0b52d099f832
MD5 5d00036b722e226c2c62abac3dc20daf
SHA1 db5b932547a476ec99c2ed377dbdb39eeba0f71c
SHA512 56d0b9212d6ce6bf6c3361ee20c3a0fa8342c129b1aa8ebad59f2bba8584e7c7ad3141e6176345f0b26f24240821f28eff463eebf1afccaf38df8a2a82ceb614
TLSH
T14F313524C90404BB06E442ED98AEC39723588E0747483C09C7979C096B4EF77B2F6BEE
MD5 SHA1 SHA512 TLSH

soc-framework-nist-ir/IncidentFields/incidentfield-Analysis_Response_Recommendation.json

SHA256 2d2e6a9fff88d0fe764f9dd4d25fb647b0a8885a62259fba74ad87e65b9546ed
MD5 18ba5fba3836cb013ab431bd6c8e9377
SHA1 a71c560d6079ec74cecafadd839071323e2f7510
SHA512 9540faf279668a3a330dae2eb3fda479b3bacf3a22068a0bacfbec840ea3f7ed43c0709feca83eff25efdd65555ffef47319b175a8f45990603ead26760d2a84
TLSH
T15D31BC20C91040BB06E542AD9CAEC29323588E0B17883C49C7975C4D6A4DF7771F6BEE
MD5 SHA1 SHA512 TLSH

soc-framework-nist-ir/IncidentFields/incidentfield-Analysis_Spread_Level.json

SHA256 6b95e118b6da69ebe8a84c6ba748cdb65578c713ce9db8eb74e50181ca875ee7
MD5 aa274a9824687c3c45fbe104dce63056
SHA1 6517c648deed875ed0e286a224040e70ab66b9ad
SHA512 a5f1487dbbec2997de5571f3f5c54bb33315232ea2c78d082bc3b010519af9b43f4438a0da49fdb518c3e8b1e510894b2f5888cb607d642e41e396048c50eef4
TLSH
T17731C031C91445BB06E451AD98DEC29713648E0707483C59C39B8C09664EF7B71F6FDD
MD5 SHA1 SHA512 TLSH

soc-framework-nist-ir/IncidentFields/incidentfield-Analysis_Story.json

SHA256 0694b0687afae75474c332f1e1334568007d99494b88985ac8f4da6b92b6141e
MD5 716826b173157dd377afedc62146b3f7
SHA1 881710cbcf2d33b8e2469cef4efc0e68197da9a9
SHA512 f1701d2289743c172e5a17591f9d3d139e09dd9fcfe306bc1724f26f0ab81bea17eba84e4e652389c65c044ef5d6c288514ad351c1e322a3a6705b17807bb936
TLSH
T1D131AC14C944457F0BE442AD98AEC39717948E0B03883C49C7978D09664DF7772F2BEE
MD5 SHA1 SHA512 TLSH

soc-framework-nist-ir/IncidentFields/incidentfield-Analysis_Timestamp.json

SHA256 55760d2e3516397fa536c00a79a162264644be4cc8d3f97d26843709f38f1203
MD5 41a377a57d5fd8f17c49c815d2501306
SHA1 75d914b75a8c832f13a06dbd777eb98a8907dc6d
SHA512 a07470bfb1229ae115578d0c70e8e8fa17ea9faee2abec9ce0bfc3a2125e7b4066037026e6110b5ba92403257e7e1287eb74c99c9348b7c90666c8c6e232795b
TLSH
T1D131CB20C91044BB06E482AD88AED2932354CE0B074C3C09C39B8D096A4DF7B71F5BEE
MD5 SHA1 SHA512 TLSH

soc-framework-nist-ir/IncidentFields/incidentfield-Containment_Actions.json

SHA256 f553cdd157a8b1ad2f56beae1c0e65e02138ee82e01aaac6ccc98a862482ccf6
MD5 6d68ff595a819e25d95954f2c31d4fe1
SHA1 641a5d89904b809dc26f4a959d5f9301f7bc2185
SHA512 58df042d739d989384fb65b5f3291fc92499ca3292ba807bb7c9ddea6f5c53da4db0b9ebbd8d45607d51d8fc61986fa7461248618de0eafd3dc9760c0d8ecaf6
TLSH
T1E6318820C92055B706E542AD99EBC2932354CE1747483C19C3A79C096A8DF7B31FBBDE
MD5 SHA1 SHA512 TLSH

soc-framework-nist-ir/IncidentFields/incidentfield-Containment_Story.json

SHA256 d30b96b1604d7489b58303edab86aa3fd02d782d4d198066c8b385d8cc9e0ea6
MD5 614904dcb6988e45cf033c6d199f93bb
SHA1 8c7e04edeefa5bcd1866068a610c4f9b223831b8
SHA512 9dd16c839a8b917b12d19f335df616769cf5fc8d4884cccab05fc159f2e396aaa455471b2f46189d9fa209f27f8ed520bb249ebfd1bdab3ab3ec339987f43c1c
TLSH
T1D431CB20C950147B0BE842ADD8ABC29317548E2B07083C19C7A79C09668DF7732F5BDE
MD5 SHA1 SHA512 TLSH

soc-framework-nist-ir/IncidentFields/incidentfield-Containment_Timestamp.json

SHA256 758b352a42eeaf61cb57396fd9c79e6cec1d19cf3fd904ab2542bec7264b73ad
MD5 74d56ba38e7d03b29f1a061f8009cd11
SHA1 d230b9ca239b0f3c5244fe47f9ce01b4d2eba3c7
SHA512 a5f21752a61a7d75076a97866b35ea4604acc576810cea0b30903473a8ecd076255f4bc132c0c071851bf54f2308bef9c0f813d0f050ab6165d11cfaad17a9d1
TLSH
T171318B20C924447706E446AD99ABD2932354CE1707483C1AC3AB9D09668DF7771F9BEE
MD5 SHA1 SHA512 TLSH

soc-framework-nist-ir/IncidentFields/incidentfield-Eradication_Actions.json

SHA256 7b863bce69bee174b44dcbab2f89570b3d09aa10c474b2b30825beb952e80782
MD5 dda13f7d8b0250a98a7da6828dc0cbb9
SHA1 0a1b1fa7cdef92b96911958eef41b7cf4397ab8e
SHA512 30edebd9430013a7eb9d99840eedec4639a80625765810c933b887232d7bc03779e07796aa4c9c1c3c8300c6df66d6e566648aa35882aa5b49d76ab27e58ccc4
TLSH
T15C316721C91055B706E542AE88AAC2C323658E1B17483C09C7979C096A4DF7732F7FDE
MD5 SHA1 SHA512 TLSH

soc-framework-nist-ir/IncidentFields/incidentfield-Eradication_Story.json

SHA256 8d31d4d0fedf587b2ea34c54cde30a57a16eaf9f746f097491d46baec21530d3
MD5 a551fad6c5e91ce7e64d0293b8c774b7
SHA1 731ead4ba8380e9f4c9ec8eba00e9da4afd13b7b
SHA512 2b9fe0609f59b4cffb4c12361b8f8c60b90740830ae345a975b2c243460116488acb3e14b08a72705e1555e5cfed2948f3bfc2412d8bc9c8d853f346754aa7f9
TLSH
T10E317A15C940057B0AE442AE98AAC2C327998E1B07483C06C7979C09664DF7777F2BDF
MD5 SHA1 SHA512 TLSH

soc-framework-nist-ir/IncidentFields/incidentfield-Eradication_Timestamp.json

SHA256 e4f0c9411ecc62d2f9070bf529cd5f3db788ed95b478717c52d2861d08bab460
MD5 342bc015a48e3970314b3e5a2c6aaec5
SHA1 096d656f7e7b28aa6e04e3aebd4c610a00995c5c
SHA512 ec4d6ac785c1bcfbfc60821801087b318508fdce7da74d8526932cf260b46ef33d7302470dd862ceb645b3981d9bd1004ed6d848c37267ce1f27db7fa1dc01d3
TLSH
T1F331CD11C911457716E541AE88AAD2C32365CE0B0B483C0AC3979C09664DF7772F6FEE
MD5 SHA1 SHA512 TLSH

soc-framework-nist-ir/IncidentFields/incidentfield-Recovery_Actions.json

SHA256 610102febebecd1627b0f9b1dc75567f45875b37acb06551efcded36202afccd
MD5 6f178795b338a8d62b48c7195324262e
SHA1 23d3f7c3c7275137bc0e13708085fbe996da4756
SHA512 58a5e23c2e154686bda41d89eb06b9fc43051596a955378f515aa7a39893464dbb5ea80aafc036b495695d7469832f36ba386d2f499c9618642f91ea3c996502
TLSH
T19F316720D91055BA06E542ADC8AED28323688E0B57483C09D7979C096B4DF7771F7BDE
MD5 SHA1 SHA512 TLSH

soc-framework-nist-ir/IncidentFields/incidentfield-Recovery_Story.json

SHA256 188a3e3926726d1e3bddd3783e2448d9c1509ea854cf2e877c9ef4dc9d9a1d76
MD5 1a01c1a83e4ed5fba9a532bd1fdbd91b
SHA1 73eed95461da95b85e1dc68076bba2463d607233
SHA512 5612ce301f3d202bc0e1a04f546c1363f2744c1eaa3c9f2f09adc3224b022d327288b8d869a38ff60acbab83192b70f34a1c063075a55aa6bb31eac634aaeddb
TLSH
T1AE31B910C940947B0AE442AED8AEC28727948E1B87083C09D7978C49674DF7772F6FEE
MD5 SHA1 SHA512 TLSH

soc-framework-nist-ir/IncidentFields/incidentfield-Recovery_Timestamp.json

SHA256 83bf943df08f365a84179b6f81f532e4d20df8466bc56ae43f8bbd8c0fe026ae
MD5 c1d364646427f2d957f11bbe15abf77f
SHA1 309887f67c4ca82782b1b55cbef6245765b5f3a9
SHA512 a0aa0e925acace0074716f100addc5ed395a4c5ab22162eea056745447a4f6061ce870ee26c28f40d15ab834a45a7dec78d4e040fc39bdd941e91d5de8ef6fc7
TLSH
T12131AB20C910447716E541ADC8AED2832354CE1747483C0AD7AB9D09674DF7771F6BEE
MD5 SHA1 SHA512 TLSH

soc-framework-nist-ir/Layouts/layoutscontainer-SOCFramework_NIST_IR_Layout.json

SHA256 da7418129fbbcbe7b151fe1a7b133847fbc792e6deedf0584c5caed2dc3ae3fe
MD5 ac4db9fb88c16abd07dedf831443d2d1
SHA1 130b4be7467c17a5d9c0365f1e19c7f0b6415dab
SHA512 3aafa866c029932698cece86e7a9bfe4fb3e214d1562c31c4052d479dd46bfaec6a0173e3844b0521efef05c740be9eef15889085355a958b52e3b59f589be23
SSDEEP 192:qMfV7UmwLYYeEJ9Ly8GpnC4OGCeTOq88GbiNq:xwk9CcsqrNq
TLSH
T16C728728E5201D6324D90076BCDA83471BB497178DF43C08BF8D446D5FADA2E26B5BAE
MD5 SHA1 SHA512 SSDEEP TLSH

soc-framework-nist-ir/Lists/SOCFrameworkEnrichmentMap_NIST_IR/SOCFrameworkEnrichmentMap_NIST_IR.json

SHA256 065f3924798550ad7ab715960cd809687de55b0b3bacef8c38de9d4112932278
MD5 3149501d9b03569ac415407c7f40b18c
SHA1 8e6d3188e888a603718d736f46c36ac669831b30
SHA512 df74c79999fb40191649f76686429be3ef38ef5d9528476a20504c9f1d7e9fe59965d5ae1d97b6e7e031127c8566ae56fda33e61916bfe1a08e5cc39bb29e288
TLSH
T1AE114C748D480AB644E802D6EFB8D25367604E2B32143D8899835404554DF7BF3F6BDE
MD5 SHA1 SHA512 TLSH

soc-framework-nist-ir/Lists/SOCFrameworkEnrichmentMap_NIST_IR/SOCFrameworkEnrichmentMap_NIST_IR_data.json

SHA256 ef0a6311b21ba3c11bfe16a4b16f5ab6ca55d277468f66123448bcf36b538147
MD5 471d3bc804b46a382e4bb0274234c829
SHA1 a35b52f4d726acd75baeaaec95c3cb754ed692d5
SHA512 7d1b86b6315e70d7beb35dcbafd7435a5836d88a461f1008c1a1eae3889352dce58ade4cb402335698c41cd45088a2fbb34040ee889ec9efa38ef02c16b52032
TLSH
T14BF0FE9DF89C0C402B8C03E1E97BE281B450404358A93BBDB6DE896C5FBCDAF163816C
MD5 SHA1 SHA512 TLSH

soc-framework-nist-ir/Lists/SOCFrameworkNormalizeMap_NIST_IR/SOCFrameworkNormalizeMap_NIST_IR.json

SHA256 0da5e89fcf6b6f1348fd741cbbf2ec17d840cb0056487013c66881b7d4bc2015
MD5 9948e64dbce947fac846599ffb7741eb
SHA1 30be014c04c55601691a24e5e5890ac255357fe6
SHA512 d180e203c57cce58f7ac62cc65e1cd565db02b6a748bb8ec8da99acb6ea0c9557570d7638c0c567d4c62d90e696fa6b339312e1347a61c03e8bda6b2ab1cb337
TLSH
T19801261488180E7744E843E4CCF8429367544D1B724839C88E836809A55CF7B71B6FDE
MD5 SHA1 SHA512 TLSH

soc-framework-nist-ir/Lists/SOCFrameworkNormalizeMap_NIST_IR/SOCFrameworkNormalizeMap_NIST_IR_data.json

SHA256 18e61f9d27f8bf4af31a49181308403f58ae0a6c3a08861eb21110c62c5c6e61
MD5 073ace62c2a3c5f621cb248d08c28a6a
SHA1 c68f6ba59d34f12223bc36b28522821c8132b63f
SHA512 cc5a44d1113b2c9c6402a6735c9c9f5e60db5ca867e50a4f6d032c045777f28b93ecff629b1fb2b1c0411606de615520a14f5fd03616c6242abb4ea0910fc1f6
SSDEEP 768:dNSOQ385FusXQUSCJpj7fI+2Is3H3xzdI+TUNAQQgTqe5tsYYyobMvQT3qG7QNLa:YAC
TLSH
T188F2E59EEA794DD701C412A565BA8BC229209187CE1578297B6C15ED0FFCD3F2A303BD
MD5 SHA1 SHA512 SSDEEP TLSH

soc-framework-nist-ir/Lists/SOCFrameworkPhaseContract_V3/SOCFrameworkPhaseContract_V3.json

SHA256 89c3dbd711e849df1077f49b23713bbea87e50b1cb84ec55119fe5e43da717a5
MD5 fcb7e3c26e8776b0da5f1e8bb25b5fa2
SHA1 ce5e2390cb8e94bcc5f7e86d5cf130a5f8b9ee10
SHA512 42f6b57818f874fd14d4277e0db7269e915fb015d452d3e908b07cfa6e2b55904b87993cea9f1c16e703264e6bd3bf4cffa4b0a0fef0807e2cb61fb1a2b787f6
TLSH
T1D3012628954846B600D412D5C8A892236B615F2A724C3D498B83B401598DBBBA1B3BDE
MD5 SHA1 SHA512 TLSH

soc-framework-nist-ir/Lists/SOCFrameworkPhaseContract_V3/SOCFrameworkPhaseContract_V3_data.json

SHA256 cfa211b85dff21edceec75cd59ce4e4e619e07642c05af1109c8af93b9afbd23
MD5 34e6d56e39b4d0c5b411b3c4394b7b48
SHA1 f0b9e0d304c595bb6b932eb924728a38e43c26a8
SHA512 b4b0818312cf209eb4d0b438a31aff700940a9b0e0fe82d118f4a382cafd060c82ceac8aa124063fa66a30450324c8bf4fabc9023323e575bfcc3408e5040444
SSDEEP 768:zvN8Su9VYjgKLK7hNqxAxRM+yIABbyh6ySjtvR+VW5Hxv2G3elb/CPusLvnoEEWD:zN8Su9VYjgKLK7hAxAxRM+yIABcLPnW
TLSH
T144F2BE6EDAAD4CA702C962A570EF42C2A43405478E553D947F6C899C1FFE83F253839E
MD5 SHA1 SHA512 SSDEEP TLSH

soc-framework-nist-ir/POST_CONFIG_README.md

SHA256 6a04224aab37055f842dda78167d373902e9ab58fa396cc9ebd268ea32f34d0a
MD5 7b7e2355cf4a269eeb111715eacb5906
SHA1 7d3b0db61f2bc9356c6999d3a8b9d512104984c7
SHA512 f44bacdff1f183ad6fe84b47c4605e2013f728e1593a731c8c6052cfb7bc393bb541cf037c817fe89cd96b3485ee035dcd4d8caa5ddb2ebeef65e7438cfeb84e
TLSH
T11F5164AAB30A1375053B69B2F14F32D2CB76905DF2653118684FC075E17AA70E7AB3D0
MD5 SHA1 SHA512 TLSH

soc-framework-nist-ir/Playbooks/EP_IR_NIST_(800-61)_V3.yml

SHA256 46f129021c831ae7253315360713e110f8e929efb38728c8ec67fe7d4b07e4c1
MD5 8b578be06ba06084e3995e6858280ff9
SHA1 23070671c3a23de1d8ef8cfdbd98184026a2022f
SHA512 ad9cae2e339991149ad38d001558b2d0634c18d3d3c916114ba3be3bd73e90f39b2a883bf7103f9ac885022e75d2f4c699d154b39c70cd49bae73fa578eeb080
SSDEEP 192:546r7dS84rKh7vaAyEGepaAQbfSHpV5aA8SVyaA3x8/9oaA9Kziew7aA6GPx:54rMByEVrQb+VbrVsS/9S9KmewtDx
TLSH
T10FF16512C1701D76929EC1762CBA82509B30905BCCA36C78FC9D87A85F96235C7D7FEA
MD5 SHA1 SHA512 SSDEEP TLSH

soc-framework-nist-ir/Playbooks/SOC_Analysis_Evaluation_V3.yml

SHA256 5626b82193626ea941191ef4b45c038b1041beeb09644a6816204003181ccc73
MD5 9c9cb8c3172c2a610d59fe6198f87770
SHA1 d2a61e0e5f4ca36de834e996a234d28ce68a8807
SHA512 53863bcc84a179d63682ef5b4c6f281a7d43463ea732f493e155eee941fddd05a22c5b310ceded9811d8ffa280fab356cdbea028096193114902be9e925ec4d2
SSDEEP 768:v70Y77d+ntC7d+dGV7d+dgR7d+Ydi7d+VUp7d+ZqR7d+Bv67d+MoL67d+aZU7d+G:D3J+nwJ+dEJ+dgJ+YAJ+VCJ+ZwJ+BSJ4
TLSH
T1D62384B34D195C39AB4656731CBBD6809B646A03E885C37EFC5D8CA86F462B04386FF4
MD5 SHA1 SHA512 SSDEEP TLSH

soc-framework-nist-ir/Playbooks/SOC_Analysis_V3.yml

SHA256 1f4360924bda34c0eb2f0dc65b9ae45e7de406f13d7c49a12d07429a7c2d0516
MD5 007617727c5bb8e661d788b1df4bf56e
SHA1 6909eedad9b1018f7d9b9f0d86d432ab67f3c7fd
SHA512 b10f3d9cb799cd214fcdc11735f4490ca27fcbe6e6ac5543b0d765451ceeca72b4727d4f2c6b21a924395c38f26d98f560910329d13359b9963a66220c1e0846
SSDEEP 768:Xa8AuwKLLJD2UsGSEAo4P4XfJBjBVB8BnBpBGB3cwx4wxhHDx4Dxcdhx4hxkQJxg:q8fLLJD2UsGSEzBjBVB8BnBpBGBswx4u
TLSH
T1BFE21116E4AD2872D35DC67A0CE7D200A7317C43C8416978BD9C86B59FA6234D2C7BF9
MD5 SHA1 SHA512 SSDEEP TLSH

soc-framework-nist-ir/Playbooks/SOC_Approval_Gate_V3.yml

SHA256 61438eae6d6448698f3b382e97496c3b82a7291004f15ace6985ed34374b3227
MD5 5eda2200e0dcb964947704b799305718
SHA1 0b436f613aed01c393e005cf541517d2a2dffc5e
SHA512 8bcaa10dc36523aa216b75db7b576ddbce1206f641d6f00ff184a6a72f08c4f5c474343761effff5fe8208b5d68ab6fb5bc90e566651d30eb9f2902a49573f1a
SSDEEP 384:l/QMyhBEDmDdML2W8ze1IjqhhdtELUrADdMLxXJUVUGWjqGWh:l/tyhBgmDdMLEy1IKhrELUrADdMLhSmS
TLSH
T137425225D49435B1E24E80BA4CBBB2929734B003D4D62939FD8CC1E45F962A0D3C7FEA
MD5 SHA1 SHA512 SSDEEP TLSH

soc-framework-nist-ir/Playbooks/SOC_Containment_Evaluation_V3.yml

SHA256 f509306caf79fe39fb71119bfd185b2dc53d405e4adb39b23808477261218f20
MD5 dd673073394cd0b4a1f15b6a395bf9a5
SHA1 807d483e71fad38e3300e783f19c4cea7e6cc160
SHA512 a0937902f5dea568e72e0fd0f254df3406813cabb0f9c282ae3739ab9c08d44a6e862faf6253ed88e05c6e141a3da5a7a0bdcf846a61388928aa258778e28f2f
SSDEEP 192:nPKn0qs0cAM8E8va7d+eGTNM8E8vn7d+lDGQM8E8vEx7d+Rv8A0M8E8vu7d+e6lB:nin0L0cr7d+eGT97d+lDGb7d+Rv8An7O
TLSH
T1423263B31C6958346B0556771CB7C6A0AB746617E841C23DFC6D8CA8AF97270838AFF4
MD5 SHA1 SHA512 SSDEEP TLSH

soc-framework-nist-ir/Playbooks/SOC_Containment_V3.yml

SHA256 4e86c42aa819c58d615048620664dce29e5c25e49f14ce871835ebe5831a7fcf
MD5 be7254e67e67a3df83fda021b532eda5
SHA1 242e098a0d065bc6835453f8c78c250e24e19584
SHA512 6bd44a7ff0745263ddb5f7b45ce00aad5c34e865dd963aa68def1f7a01306983c1f7b9bf4b8b63371c92fc81f44372fad2004af8427d1cf6da7fd04828fc29e6
SSDEEP 768:FGbBEj2bEzOXETiaEwQk4BxB1BMBcB1B0B3AXgNeTlEQsLeCaEjuF1vbeHE1AblN:8aRLSdBxB1BMBcB1B0BwXgNeTlEQsLZ3
TLSH
T156E21015E4792472C35DC23B1CF3D61097757847C8422938BEAC82A56FAA238D7C7BE9
MD5 SHA1 SHA512 SSDEEP TLSH

soc-framework-nist-ir/Playbooks/SOC_Data_Analysis_V3.yml

SHA256 4e751622af3bc97f361d5464ea637aacbc3a4d7a1bf32d6d8c8125181a7403a5
MD5 404575a7b80a93db338b7faad6d79e02
SHA1 4ff3b9df82fcd80cf2f3daaef3743f07fab15520
SHA512 53f3282a7ed611ab910a30c80b47d4761e086f66ce6071f22e4f7f8f47f2b61403efae329b449d7a99f320f18310f43fa375b5bedf858a66f12a36e4de1676da
TLSH
T14241743596645D365B3589BA2EFB83408F302583DC52403DBC0C4959EF42270924ABFE
MD5 SHA1 SHA512 TLSH

soc-framework-nist-ir/Playbooks/SOC_Data_Containment_V3.yml

SHA256 433046d92c46b5fe85870f3a8db776fe33be7190f941f4bff8f89b934eec4740
MD5 79ac7a256f9503647c03a32edba1b2d2
SHA1 4a09f06a0eb059ff457308d2ab2a87f3a334725c
SHA512 7253af92e33cf94a3cef52c29d7a5699a9c24ce22d182df38769b22d2b941ae5f2c4a8d0b3f0f0ed0050e64904a575892ddaca2fa064a3f14a034ea702798407
TLSH
T10E415235147058325B1592BB2D7B83508F306257CC92443DFC0D469AEFCA270A786FE5
MD5 SHA1 SHA512 TLSH

soc-framework-nist-ir/Playbooks/SOC_Data_Eradication_V3.yml

SHA256 bc9a4beaac2510629f1f077e52efa78b7503b62a32321487e332392d1f2ef352
MD5 6c74a4e604f1e7729d2162cc6e04279e
SHA1 13ef54335cb7eb120c23d19e4a97f689a29dc94e
SHA512 8b38358bc947eb4cc4902a8d57884998a0e48e9a344a717b52f3d0c7b95b5d0086fa0daae60b4bb0d800c2de79d0d333b117085c3eca56c147f9c079e4b89a12
TLSH
T15C41333649655936676591BB1E7B82508F306157CC92803EFC0D06A9EFC7270A742FE6
MD5 SHA1 SHA512 TLSH

soc-framework-nist-ir/Playbooks/SOC_Data_Recovery_V3.yml

SHA256 eaaff56973453fe12dfcd3e1707d17faf1ee767abe15b2f25a9de8cf041586b2
MD5 f9f0f376da48fee50394e2601ac3dd5f
SHA1 41534897f389d0b7475c799eea307c8365f97f65
SHA512 5a839b0f255a7cd661a89d05fb2142474f4db9c09e6428cf9359ffaf3f0d8d1d6b2419e801c1bf49fc976dee49246713f7da8ff95242e376949345bd06901bae
TLSH
T107413035596068369A3591BB5E7BC3104F30A197CC92913EFC4D069AEF86270A682FF5
MD5 SHA1 SHA512 TLSH

soc-framework-nist-ir/Playbooks/SOC_Email_Analysis_V3.yml

SHA256 f992bc3044386354675875a637787b19fb2460f8df352d05ae08f3f2b4091600
MD5 4787d08c02ec1791460b588a6c687371
SHA1 f53008d8c29e2381bd011c64df910a88dce76633
SHA512 8f5c3f07cccfef2dc2fd1b5f7a41b54c543ba27714f35eb923d2b4c30f65132db39ecb4f45f2350ee980dc42cc97f27ce2dda931545621931552d00a8b0cd03c
SSDEEP 384:+XDn0MTBi76kN5Vr5gCgzV11qOxVxGLkVWyeXm7JX+Vj+rfVvES/14AK6krnRs7Q:+L0KBi76kN5R5gCqr1qOxfqk8LXm7JXY
TLSH
T17BA25235447958769799C1B62CFBC2119F742907CC22543CFD4DC9A5AF8A230A6C2FFA
MD5 SHA1 SHA512 SSDEEP TLSH

soc-framework-nist-ir/Playbooks/SOC_Email_Containment_V3.yml

SHA256 61f8e2fe254e62b2ec88c31a52cd4661c4d13e3c50083694541e8ca98fcbbdb3
MD5 fda3dadabb82340e98878b0c5587d291
SHA1 036a19dd719f4920a159aefe9751a7bc5682743b
SHA512 b49c70f442e7a0f50116aade0508788f246349a7afdb7c155817b3498e5301fdd88fd3be617c34d14d93b118afc87a704b864126b52eb0820c2f4457819db6b8
SSDEEP 768:F3SIKnufoSdSLcDdM/NDifIp8Va8V8/8K/ZgDdM/+Yj/sGDAyNB/sGDAXxlDdM/M:xSDufoSdSABM/0fIp8Va8V8/8fBM/l/o
TLSH
T13CC25411D0B928B6934E817B2CB3D2109B316913C8495839FDAD81B4AF66334D7C6FFA
MD5 SHA1 SHA512 SSDEEP TLSH

soc-framework-nist-ir/Playbooks/SOC_Email_Eradication_V3.yml

SHA256 8c0938f09145b17e1d3734bd27c0a5bf3bc8a87dc311c380086f64820f2e3775
MD5 541c0d30468246cb3c56098a4def4a3c
SHA1 0d0b092773f66de31792cbbd399c5ee230e8321d
SHA512 4b50104c14f9c18e885cabd7d4f4241b21fa4a123d968152ae377132bb53471d06df265c86626e3ac2e67d2cdda5db386da76ac0b26ee980002f6f40bfaea693
SSDEEP 384:UUqWDlvX0AjxKr/bU75ski7d+bEMDZ0v/8Vc20DzuF0e8susBYhU7d+bTbm7d+b3:UUq60Ex6/b05ski7d+bb90v/8VVwCF0X
TLSH
T195A2712245A96936534AC0BB1CB7C6909B717417C806913DFCAEC5A4AF99330C786FFB
MD5 SHA1 SHA512 SSDEEP TLSH

soc-framework-nist-ir/Playbooks/SOC_Email_Exposure_Evaluation_V3.yml

SHA256 0b69480fd78d3b4c7ba81a6f402b559a5859823b3bbed19a79e21a0adb0e2fbf
MD5 6d3c84f9f8e7ec709dad7f8c80c8e94a
SHA1 9bc1952c327d66f1daf3467fed8116ce520c90a1
SHA512 1e0af578c5b8f6328f1e79488d600dc2fd2b3d47dda5062aebe075f2199dfd748478c3b05934eb30c4c82bb1d7ee71ef2e93bac4b217fd50a5d9e19cfccbcbc8
SSDEEP 768:Cvo6N7xIxRgPsG7VWGxTSUGxHrv4x/r3ZxxBaxc+j8X0z3UnKAMxr3Jxr0zxrrPw:8P7qxRosG7VhxTS/xHrgx/rJxmxcJX0P
TLSH
T12A134316C4696CB6E24E817B1DB7D2006B306843C845683DFD9C86B89F67334DAC6FE9
MD5 SHA1 SHA512 SSDEEP TLSH

soc-framework-nist-ir/Playbooks/SOC_Email_Forensics_Evaluation_V3.yml

SHA256 6665bb8429ba820994e8c655b67120d75ee13b3772352692d3c51ab5a05abc94
MD5 7aad074f3e0ca36432264d4f7796f736
SHA1 090955143bcabe402bdd8a1fdbca9b63b87c34c5
SHA512 fba719827654726e32a2bd18be0409c49889fec99cff97b56cde7082ebd4b104e40e75715716e2b438596d344e106eef720a955705ac20106712735785c4a163
SSDEEP 384:V4gQmPU0SqCAJ3zdTC5rJlVdTLc/2Ru9gwWw9wW8UmjcvaAsYuyvUZZReIQpGfJU:V4gQms0lCAJ3zd25rJlVdne+wWw9wW8M
TLSH
T1D082A6311866653A8328C1B75DB7C7105B227903DC51903DFD8C86BAAF99238E6C6FF6
MD5 SHA1 SHA512 SSDEEP TLSH

soc-framework-nist-ir/Playbooks/SOC_Email_IOC_Enrichment_V3.yml

SHA256 186bbd1ae0c949a9aa886ac4eb46ee4907bdf8d0ee5688d5c7ced43e28a7c924
MD5 769674befdaabea29fd99290c936e722
SHA1 d5cd411511087f40e096ac24544e2379e251f332
SHA512 5bbcd396e3d65a47756c75f86561aa3d2e315558f0a2daa9c4e74fbbc610b10ca58f7523106174e04610ee99ff49ddce6eb188e2b85b8f97448ea716d5719b2c
SSDEEP 768:vJFUzoJAWJKPJX3IsBMI95lPzQgwHYHI9P+0WBlhRnR0wRTBScI+5ea2iXITuDdo:h3J1JoX3JBMI9UgCYHI9mpBpnRLRT43h
TLSH
T153D22F21C06928B7925EC1771DF7D3009B206443CC466839FD9D82B49FA6274EBC6FEA
MD5 SHA1 SHA512 SSDEEP TLSH

soc-framework-nist-ir/Playbooks/SOC_Email_Recovery_V3.yml

SHA256 e029075a67c796e7fd24bc982a16abc13d0924116d778a4f6d69f8f322600788
MD5 893d3ac8db81daa965c1f3893bb46293
SHA1 fa34128653c7f8e0cbff4131161fa15659ca26a4
SHA512 e44b0f6a6365ba74a0d2b9da4c8adf8d76bd5d79d7736a9a34b517d51357d903609ce0de6380ce238225113e2e4dfff635bb4c6296610a61505e10fb71d12d41
SSDEEP 384:yH3C6A6UfGnt4TdN77EhN2rDdM/Ky7DdMqzw9kLUE96DdM/AtBDdMqBF9kfw/LCh:yHe5N77mN2rDdM/Z7DdMqcyLUu6DdM//
TLSH
T14D921016D16928B7938E80B71CB7C2109B716447CC056839FC9D81F49FAA2749BC7BFA
MD5 SHA1 SHA512 SSDEEP TLSH

soc-framework-nist-ir/Playbooks/SOC_Email_Signal_Characterization_V3.yml

SHA256 28df2c3011eafb93499497d02dedeb6dd09482708e8490ca7791d47d657d1cb7
MD5 7b2a9831d461a8d84b30832e8da00d71
SHA1 b0b9d179b62a545a77f8d4b4904b600b13dcc0db
SHA512 b4313fcbe3a55c009c77ae6e18893a3025dbdd086af469839a48532128b6edb8d0b9752e2b73a9b8939ec628aa4ae95290bf0856e1ec9868d49ca1108a27bf63
SSDEEP 384:2kk5VMGhqyV1DpRYPMF2UY0zRecGzmH8DdMQMpQrGz1BysyPKtDdMb/O0p8p5Dd2:2kbIqyDD7YkF250zRDGicDdMlpQ6RByP
TLSH
T1F482401684A564B7835EC57B1DB7C3009B316803C8465838FE9D82B49F66374ABC6FEE
MD5 SHA1 SHA512 SSDEEP TLSH

soc-framework-nist-ir/Playbooks/SOC_Email_Spread_Evaluation_V3.yml

SHA256 1d76fb8c7791150cbdd86faf55b39ddcc542c646a68c1627bf8bcbc2428c7098
MD5 d26a9239a9e2a87521c81e0e8d31c45d
SHA1 0ff8ff1bb94b485235b2819dc275db0de5c976f4
SHA512 e96513e29fea874e6dc1e2f695f355866284caabc54f67c9fb5794291104774342a51457cfaf6639368d119b739508c2a632cfc0916ed1f65a17075efc1c4465
SSDEEP 384:PMlDl7OEQ740KzMxB1jmN3jkk5g7d+4sgJ7d+4D6T7d+43T0A7D3mN/7d+iyqL7y:Pal7OEQM01rjmN3jv5g7d+4bJ7d+4OTz
TLSH
T11B72B63349A821369399D1B74CBBC2118FA56507DC11513CFC9D89A99FAA330DA83FF9
MD5 SHA1 SHA512 SSDEEP TLSH

soc-framework-nist-ir/Playbooks/SOC_Email_Verdict_Resolution_V3.yml

SHA256 b7f21d27440c53eede8a944d4dfa46d43cf5fab54b530cc2b0ff36bca786e4a0
MD5 c0736781562ffa470c15af7bebb032a2
SHA1 59b22e09b4f2bbb7a0f0c643951bb03586105156
SHA512 ee389e06717dc5a045f54bd1f35ce195f39d986996e73bc968710629feed3539709cb6afb723498347160d1ea73c63dd3a37b445734f513a7ffc811d96b9a516
SSDEEP 768:KaXShCZXfdZ/kFkdkdIofmPofsbofgkYSYKlUeGnofGwx1blDD9VK89N3xjGxPKT:7XSWXfrkFkdkaofOofwof2SYKaofFx1t
TLSH
T15DC25016D46928B6A34E813B1CF3C2106B716907C8865838FD9D82B4AF56374DBC2FED
MD5 SHA1 SHA512 SSDEEP TLSH

soc-framework-nist-ir/Playbooks/SOC_EndPoint_Analysis_V3.yml

SHA256 12610e76c9525c4b6e31245a53e0e2c11f9cb0e968e29347feef5ba12d846701
MD5 ac1e7b2c561a2841c57357fc9876b30d
SHA1 1ce941903aa23599dacb284d7d57d69573c0332a
SHA512 3051e6e5b6e58921d4a8768d67177420057e3a1db28b0737bf99735a50328c41b49e437ddef524b2870832d676d4afd3eda4db09df9a44349cba36286cdb7b63
SSDEEP 768:aVXC+WGzCrrCv/uxx/6rNPywDdMtK5DdMtwjDdMtBoDdMAVrDdMApalBi76kNpDA:KXmrrCv/uxx/6rNPtBMtcBMtSBMtCBMH
TLSH
T14DE29727D5691C76934E81772CFBC341AB705A03C845897DBC4C85A8AF9727086C6FF9
MD5 SHA1 SHA512 SSDEEP TLSH

soc-framework-nist-ir/Playbooks/SOC_EndPoint_Eradication_V3.yml

SHA256 898f65e32c5e3d2fef57d7a1727d088871dfacbd3438ec49f2f0ace37e86b82a
MD5 1e6d816ca9946033db0c6e7de76aa518
SHA1 5bb468cfb2d72b7552373da4f91b17e08cf0d844
SHA512 508ca0c289c21fa549707b6c0b062cb79a020b46302e1dc18db2f1adc931844f3c337b75a5cdfc11e8a277f5bf6c237ca184c5e9f7833ac8a36dc616c49a7536
SSDEEP 768:nWwgMba3//Z3Cll+M9HSK8kZUCqv8TIHtUvoZMiCf66SUHT6bE5DdMIewDdMIANW:Ww1C/Z3w19HukZUJoIH4oZtFXUHwIBM6
TLSH
T130C21D26D0692572D28E81761DB7F2509B347013E8D25C3DBC8DC2E49F562A4E7C2FEA
MD5 SHA1 SHA512 SSDEEP TLSH

soc-framework-nist-ir/Playbooks/SOC_EndPoint_Recovery_V3.yml

SHA256 245342f290e7c2d100d956b4fd6e0894a867bcf400d4cc4f2db96aa96da6dde2
MD5 5a4301395891090ff916b00c3426efbe
SHA1 43fabbc58b53f012f7f2b6d34596d1bdb984500a
SHA512 ec00c30e3c6c212aa4104c7ff1ddd9427e471fc0357ad032cbb0526bd115f441f668442e41e92175f47dda68da69778ca4873e52fda3f6f3d246a4867990a657
SSDEEP 384:X2MJiwMzSODtOBkrfCeUVGvMIZm5dMI83tPrm8CeFKGXENZmkvnQvGH5DdMqcC0L:X2MeuagBkrfClV+MIZEdFuPrm8CqK8EK
TLSH
T145A21C1695682473D28A817A6CBBF3215735B443CCD2283CBC9DC2E85F56274CB86FE9
MD5 SHA1 SHA512 SSDEEP TLSH

soc-framework-nist-ir/Playbooks/SOC_EndPoint_Spread_Evaluation_V3.yml

SHA256 704a70ca32ae211c5ac54384fa52532e177590d6d39687f75a7d6c05b3aea25d
MD5 04550c20dd1a851b44dd5ad26a034c35
SHA1 4233436e334601126524e5da193b832a0a533da4
SHA512 627cc2340cdd14cb21fff1a0d429bd4098f2bc5e001001a9b911d002f3163ad4faa71007d70da6ba460f0c72a78be9165befa699fb61ebe6cc4020622767dc4d
SSDEEP 384:b7409PoGawNwgxxxbxTyk/p7d+rshW7d+rDYo7d+r3HihBw07QQ6AsK+a2QgQT/q:bM0dZawNwgxxxbxTyKp7d+rwW7d+rMoK
TLSH
T1435273735C6D2935970A81772CBBC2515BA17503E805927DFC5D89A5AF8A370C2C2FF8
MD5 SHA1 SHA512 SSDEEP TLSH

soc-framework-nist-ir/Playbooks/SOC_Endpoint_Compromise_Evaluation_V3.yml

SHA256 a5e49e7cacebc9ee6e0f3a1b3812238c4b514a5f29957ca8cebd6f2301dc44d7
MD5 6433cf08e5575d7198cf2f10e030a7a6
SHA1 a4dcbaa78cccbb613c5e3a7e100fd64b0886d6e0
SHA512 417a7214278eb6b81c5b0aa5c263fce4fb792e854281fca7e8afda0dcd107d8fb156721d2a7e91f68403acfda3ac7481d91fb0eeec781658ecfa3cd28e1c917c
SSDEEP 768:OFosODdMgZrDdMGETDdMGwlDdMG8XDdMgEV15uDdMgMp0FEFyFyQCCq1rtFRFHFT:koFBMgBBMGkBMGWBMGkBMgjBMgq0FEF3
TLSH
T1E0236027E82929B5A70E42736CF3C210A7666907E845D63DBC5C85686F9733583C2FF8
MD5 SHA1 SHA512 SSDEEP TLSH

soc-framework-nist-ir/Playbooks/SOC_Endpoint_Containment_V3.yml

SHA256 ea74077dbdfb2850741e8512c5a1e6dd25d7c207b8197a511714e6589a9fd11b
MD5 7bb47d9c2cc946e9a1dddb4e3546fbe6
SHA1 f61800db2ccec169ce3d60584f21526f6c075869
SHA512 19c541407c74d715df2a855f41dc7d663b05274e5bd29a6d6f982ba3ace606c44f44c16649eaff2dd4b9bac161ae7d25d549c7585898cfd41cb8874aba131e17
SSDEEP 768:UX+HUva+3FC5Cl2+Lf6DEYqCdCqf8za66s74CxCfK6ik602nbDdMROxDdMRCd/c:c+HU7FC5Lkf69qCd50a654Cx1jk6zbBi
TLSH
T165C24025D4682572C38E817A2CB7F2215B347103D8D2183DBD9CC2E4AF56674DB86FEA
MD5 SHA1 SHA512 SSDEEP TLSH

soc-framework-nist-ir/Playbooks/SOC_Endpoint_Signal_Characterization_V3.yml

SHA256 fcda26ebddd4ec75a55fa329f0219d21832ae8f0bd9c795e40930a6bdf7c8efb
MD5 fbfc221db71d94778641b3bd5bb59885
SHA1 99a2871e6ed31e0353a20572024f96f8cf7bc507
SHA512 d67c9edf38963f5df63cc973d9d20365822b233e4a5354e262a9aa78c717ea8bbd605afae9195c5191d1ac37a60cc2c2db4165cc74f0bde26e6ad6f3e5ac4e2d
SSDEEP 384:1wmS+U/7jWjDjgQmjIj6jJQ1H3DdMyB1NDdMynj03LH0RDdMynDAHTCAC9CzjCjN:1wOYv8XfMiI293DdMyHNDdMyj03T0RDr
TLSH
T10A724116EC592572924E927B1CF3C2009B74A907D881653CBD9C8678AF5633497C3FEA
MD5 SHA1 SHA512 SSDEEP TLSH

soc-framework-nist-ir/Playbooks/SOC_Endpoint_Verdict_Resolution_V3.yml

SHA256 89257f8cba9f87e4a17d4409bc080469d1c21b84395fa89607acd8ad2808991c
MD5 26975340c9193f69d4bd01a777fb2d2f
SHA1 53e86414182c2d2b47d2dee43dd6cfaa595a0ecb
SHA512 079c7475763b4ff69844ffce14e3468ffb834ff8354eeee1b4ecb060213f5defffa640f2341f0ec3d8c400ff9b35a9bf5ff5394d746c0444979ff8c82b05c148
SSDEEP 768:90sswF7dsu4G657d+dfuosdSqtCHFFxFQSFxFsFxFKFxFGgC7d+uOgTY7d+umE7g:9JF7dsu4NJ+luosdSrFxFQSFxFsFxFKw
TLSH
T14DB2723358696536D70986771DFBCA009B617943D842923CBC9E89A4AF96334D2C2FF8
MD5 SHA1 SHA512 SSDEEP TLSH

soc-framework-nist-ir/Playbooks/SOC_Eradication_V3.yml

SHA256 fe3684343e4375da2b1285230324239c466888439a1cb18a5d70264942de16ea
MD5 a42859f127b74bb0d2e99039330027f6
SHA1 f81bb2c668d9630512d9ded240e730589f9b9746
SHA512 ab817135c19343f0e840f0f7a35961a6cc6f45e9fb21120ad45b2b1517412fe55f0d505a807f3bee6a12d63ad0c54d33bb39f47b551603446eb5292503af237a
SSDEEP 768:sHPPlLq1fLvVQ7kprhjmSu/7THV7/P9RqipBnBVBSBiBxBbBHaKx4KxOhWx4Wxew:+4VLa7kprhjmSM9/BnBVBSBiBxBbB6Kx
TLSH
T17AE21116E4692472D34DC23B0CF2D20057767847C8462979FE9C92B1AF66278D7C3BEA
MD5 SHA1 SHA512 SSDEEP TLSH

soc-framework-nist-ir/Playbooks/SOC_Identity_Analysis_V3.yml

SHA256 2174a50c19b85658dea3289a5c20c9bd5b7f6b3d3b334b0ff50512677aae7fdb
MD5 70fd8971525f8f100a8ade1b8fef2ee4
SHA1 f505dca5accac36eb9aa669a3f95660cd2966cd8
SHA512 22c89e9bf4c28e0e1e9929e0bc89155de281f3c195eaef71bd478f888d0b4b78ce124a06bf1dedb23f374d6a7a6fdfecd49587810708ec16f63744adab032904
SSDEEP 768:A5Xdi76kN525tSPmPePAPYt7d+3N97d+3HA7d+3ni17d+3EK7d+3Jrq6okon46o8:Azi7NNsgPmPePAP+J+3XJ+3gJ+3n2J+b
TLSH
T1F3E23F2289B86476D719C13B5DBBC2216BB17803C805A43DFC5D89A8AF95330C6C6FF9
MD5 SHA1 SHA512 SSDEEP TLSH

soc-framework-nist-ir/Playbooks/SOC_Identity_Containment_V3.yml

SHA256 d64eecbb2394d43170849ace6543f8a0a3acb0d66995d277c4dbe729d7dfe521
MD5 ad20e90c90eb93295491e7559ed73083
SHA1 85d04d1be9c988825578d08137db7996f57445dc
SHA512 eb258bb87797c4074da79d816e3f9471a41ef92b8c2c2ac05d3e2a765f56123dc7f4a6f8ea08fdb85f1f0b1577bc9c08eba6b369044ac5e7014f69cc6b9e845c
SSDEEP 384:LHajZH0VbH9sEHzw862UCPKrXIHScdcKA3cKCijFDYsNSD+WsFDnsNSDvmP+EPED:LHajZ0BdsETf625C7IycdcP3cbuFDYsj
TLSH
T18672203118286836475AC27B2DBBC2A19F60B413C806553CBD8DC5A46F9A234D7C6FE6
MD5 SHA1 SHA512 SSDEEP TLSH

soc-framework-nist-ir/Playbooks/SOC_Identity_Eradication_V3.yml

SHA256 32fe5bfd47c53bd8e6a0b771105d381de763c1acdb3f7205c0b10912bfd3bf41
MD5 ed2a3a267359a71555bcd346a032f6d4
SHA1 11c0bea01ad10924637291c2077a848b3f0566e4
SHA512 b5582417d089dfa8aa8604c92d977f8faf8dfc6b0e42ed4d41f55be71e0ffe49867d89a2f187c114387309c5ab68c6d0ed0e8a7f3185673fa9d1bed0a5bbd15e
SSDEEP 384:slNFJMsQF4F90hkPF0BsNSser7d+NpAMKcj7d+NG401AF03sNSszHVFWR7d+bp5R:s3FJJQF4FqaPF0BsNSbr7d+Na3k7d+NJ
TLSH
T1D782512248A96836971AC07B0DBBC7609B716407CC05913EFC5D89A4AF99334D7C6FFA
MD5 SHA1 SHA512 SSDEEP TLSH

soc-framework-nist-ir/Playbooks/SOC_Identity_Recovery_V3.yml

SHA256 edc186c0f1ee0b5c7ab387fcc7673054397ae8f10b2160e858b53def8ed7dabb
MD5 b7fad170ab0093c90f83a16377b7b4c1
SHA1 eb7b6ffca8e744228d4b58c2b9c3138f2b725ee5
SHA512 bbda06f9289f30e33d1656f6af66d28a711847e4610fe03861ad478aef5803d09a209e645fb21c5ab03a3eb497d44367821c71a1f0bdacf01066fa5f1b7e3299
SSDEEP 384:OFnhNbcMsz0pFqxsNSWn5C7d+JpNh7d+rpCO7d+knUpk37d+LMWV7d+qEnMpSP7T:OhbcJopFqxsNS45C7d+Jjh7d+rUO7d+Y
TLSH
T18D5240315869A4369759C07B1EBBC3205B60B857C901A43DFC5E88E86F953308BC6FFA
MD5 SHA1 SHA512 SSDEEP TLSH

soc-framework-nist-ir/Playbooks/SOC_Initialize_Investigation_Context_V3.yml

SHA256 c868737796b232e84752128b491468ed2c4756d96b3ab3a76a12cbcb6d499e07
MD5 eec91a10945ebe5bb8dfea4bba5c47d4
SHA1 9b21cf7094d55a371ea1c7ac2ab5521c51e98f05
SHA512 deda46636e26cc0682025a530877ad5a232b8099ad165e7de3feac87436e76675d563bc8ff52ee0926efd498167639a38a5fd53beef50ef949b51c99ed2648cf
SSDEEP 384:JFpH6HP67AnLqyjAtdeg4yBr/oQbif50EAoUy:JFpH6HP67gL9ctdN4yV/o0ifCEAXy
TLSH
T1284242B31D665D35AB06567329BAC2C09B706A03DC91D33DBC5D8DA9AF822704386FF4
MD5 SHA1 SHA512 SSDEEP TLSH

soc-framework-nist-ir/Playbooks/SOC_NIST_IR_(800-61)_V3.yml

SHA256 b8f19c53f936133ec7542dca7b041ce0e4b3749f97e2b2f5ae5b7278c1d6a901
MD5 4015873b20adc6603c5d8b64eba5d1ce
SHA1 5e477a9af15d363bfed3ebb9665d0c472a5cd4ee
SHA512 73f05ea29f773ff4c6dc9ee8098bd24ccd7cbd4901cc9b66bf9fd85c929568837711e958f97ba86df6e4488b8f01b3cfefd4aae6be9e0528743fd3c33289419a
SSDEEP 192:IXSIfyIgs6VMnRoDAO0xWNU4IW10/jNE621m5fcZ:IXSIAs6VMnRoDAOAWN/IW1SNE621m5fi
TLSH
T14E12313245645976972DC1BB2DBFC2A08F306457CC92953CBC4C89A8EF9623096C6FE7
MD5 SHA1 SHA512 SSDEEP TLSH

soc-framework-nist-ir/Playbooks/SOC_Network_Analysis_V3.yml

SHA256 2fcdd61a83d6ce468a42dbcc7d1ccc282826c5218675d49288e7b5c59bf222f9
MD5 238e5b4c26d79c8d4c98234dd8bb921b
SHA1 903ee3390bb6419f4b07c04446d761cf5afd983f
SHA512 01c0bd0bb4960f94bf92187ef228cabcc5139b2f4f82b8ab083b664ca8814de7ac6758a296f3dbef8451392559c93e550f0ae166d889e28de833246dc1263950
TLSH
T11141433596605D365B2589BB2EFB93408F302583DD52413DBC1C4959EF82270864EBBA
MD5 SHA1 SHA512 TLSH

soc-framework-nist-ir/Playbooks/SOC_Network_Containment_V3.yml

SHA256 f3d07800fbf19196a30eb080c74c6964b74ea04063a35425dee59cb2c0d20858
MD5 4f501cce2bb56e4659b950fa29d62856
SHA1 031169b0854168106f7482fe06445293aea2c5c3
SHA512 fc2f3ad5704db07a26458af00a07f2ef8f2b804f6cf4792f736ae61a88a6465fb9bfe1f79017946e3969e2da2d9ffe15b4e9c8ed3c52575f8a48303cea564392
TLSH
T1AD415236046048325A1592BB1E7B83508F306257CC92443DFC0D469AEFCA270D786FE5
MD5 SHA1 SHA512 TLSH

soc-framework-nist-ir/Playbooks/SOC_Network_Eradication_V3.yml

SHA256 7fb32449e803463873d511c8d3f9747b5de3da4aa11af7ff3501b04c38902bdd
MD5 9fc094554382d7977e546a09bfe86af3
SHA1 e010901fa6303e6d93660a4d18792ef5a6c713c7
SHA512 644c6f7503e61dd8cbdb6bbc9516523c355265adb0ed43bdd73c0b05b464c6e128530c7a75c52a237a3246e8dfe71d3d43dd5e1339dd9c3f73090f858922abdc
TLSH
T16941333A49605836576591BB1E7B83508F306157CC52803EFC0D06A9EFC7270D746FE6
MD5 SHA1 SHA512 TLSH

soc-framework-nist-ir/Playbooks/SOC_Network_Recovery_V3.yml

SHA256 063f9d3a7b68013ad42adaa9545a4793e19a84c05b0a5bcaa8196acfe6fbd71d
MD5 909886455f15e83c321b68007e5fbc98
SHA1 770741314d533ba7a28985cdc6df17a59bf23145
SHA512 459b84cc1f324a658d28242c5292f7bb9eb7f13383e6dff13f7bd1db25abb4519adb380eb25ee94663fcbfbd2a2a668b18a9de0560ea9560c13146ffd51614b2
TLSH
T1CB414035596058369A36A1BB1E7FD3108F306157CC92953EFC0D069AEFC6270A682FF5
MD5 SHA1 SHA512 TLSH

soc-framework-nist-ir/Playbooks/SOC_Recovery_V3.yml

SHA256 ec396ecb1ec6ad8d0e1ec764a7de4eaa0bfd5411fbf72981b0d3ec68db3f8912
MD5 83316351bc96ef1348854c8813f39ded
SHA1 1a9413b3da61c57332ac3272cfeb6e2c79b050a1
SHA512 81f836330103246c362b2841f3df42c5c8e441539ce6be05da499c7f2c756f7f38a8bd326acd05d0118d76812f9fdf87f3ca42c824e763bea3ded52541ae3cc8
SSDEEP 768:adPV1puLzQ6JV7//kTOuE/4qQ8BEBsBxBHBnB7BHq9x49xVmqx4qxOTWx4WxewcJ:w+Q6HJBEBsBxBHBnB7BK9x49xoqx4qx8
TLSH
T107D21F16E46924B2D25DC23B0CF6D21057717843C8462938FE9D92B5AF66238D7C3FEA
MD5 SHA1 SHA512 SSDEEP TLSH

soc-framework-nist-ir/Playbooks/SOC_SaaS_Analysis_V3.yml

SHA256 3e0a4b25fe1f2130ffa4c0b3612680a97b33f6e0a7c33d8f3426fceffba1b64b
MD5 755c07261e77c4891e15d2f8cf8c30de
SHA1 f6c6650b4e46d17eb4314467cac4aca51421d025
SHA512 4e1c58e14a3e232773b72337936f7036b8e3fda06a523d7dea9f255a3e74df2135281f935f307ca2bb4f2eb4f0e64aa4d53a48960053918eef959bf9a81149c1
TLSH
T1C241433596645D365B2589BA2EFB93408F302593DD52413DBC0C4959EF42270824ABEA
MD5 SHA1 SHA512 TLSH

soc-framework-nist-ir/Playbooks/SOC_SaaS_Containment_V3.yml

SHA256 c0322278a336977f7d6099282ceb45b49aa055a57c47e4ea765dde35ecfa8144
MD5 9677b5143dd04a1e026c9accbae95cc1
SHA1 23a666397f9f4c263ffa690a170a8bb8cf70a154
SHA512 ae94b170eefd4fdfc987bb91f76629dbd1a2a7d9b2d74ea2b31e15d5fed2559e9b83444a9c30a8f4ab98738599cc3e03ed9251573d35b501fac0ec3119a91015
TLSH
T1CB413235556048325A1592BB1D7B83508F306157CC92453DFC4D469AEFCA2709386FE5
MD5 SHA1 SHA512 TLSH

soc-framework-nist-ir/Playbooks/SOC_SaaS_Eradication_V3.yml

SHA256 e7dff628d09cae6bdcb0af36da30443b1721cc8be9434b2c1e2c46fe91db86cf
MD5 1a8bf91ab7ae39c5bee3c38c4b30d4ce
SHA1 541a43184210139f65b12da07906a3bd2781de11
SHA512 c2d2fe802f1531b3abd3c8b8c00f2033678e9ca753a1c8122947e1816941ec37c28a71bf7782924e09069f0e16a11b001f7da0b4830b5f2f8b7b27bef8d77632
TLSH
T1B441313649605836676591BB1E7B83508F30625BCC92803DFC0D46A9EFCB2709382FE6
MD5 SHA1 SHA512 TLSH

soc-framework-nist-ir/Playbooks/SOC_SaaS_Recovery_V3.yml

SHA256 cbeabb7819e6bb0eb74240f0ba1cbec2b3455ee63306031fcfe7b2694fdd65ee
MD5 f737043337b55de40a261fbfca6ca3a0
SHA1 51a74876048a44acde111a70d6bfdcb9cc2482be
SHA512 5bf12e013c52e7599fcb2b2511ffc18c0327231b91b03104822c028dc7a916d7e5c17610661884d870761fadebea71ac2036d3bf9ce2537168136ad4ea894261
TLSH
T1F5414235596098369A35A1BB5E7FC3104F306157CC92953EFC0D069AEF86270A282FF5
MD5 SHA1 SHA512 TLSH

soc-framework-nist-ir/Playbooks/SOC_Workload_Analysis_V3.yml

SHA256 466d4dabf9f2401f134c0e3f484e288cfead92f5f2521796f54588e1b145319a
MD5 d3e7667d91720ff827f52039f7b2fad6
SHA1 21bb6db131c452bedd5b4fa9e798c7230c9a5597
SHA512 981bea81d01397c9d90300b492066c4e99222a6a55e6343892d78a1f0985be71171bd03a44f3550c2b5621b2f0793c5a1e1f324b5525e802397ece76fc1669b0
TLSH
T15B41433596605D3B5B3589BE2EFB93408F302583DD52513DBC0C4959EF82270824ABFA
MD5 SHA1 SHA512 TLSH

soc-framework-nist-ir/Playbooks/SOC_Workload_Containment_V3.yml

SHA256 9230d11baff57c84e500e79ee8aa3448c1aae82055598052cd0a52b51900714e
MD5 f63c931ae3591972684de9c7b94048a1
SHA1 e9fe203cb9e2ee6769ead4dffb8e4fc711da5134
SHA512 aad8d7efc93025eea37aca06c79f9f4c6a6aba888bc89cb3e449d8ee539dcf69a3e80cef6746ff4ce4ba50d5301cdd21399e3fb8abeb086c016c96e8824a4340
TLSH
T179417235446088375B2596BB2D7B83108F306253CC92843DFC0D469AEFCA270D382FE5
MD5 SHA1 SHA512 TLSH

soc-framework-nist-ir/Playbooks/SOC_Workload_Eradication_V3.yml

SHA256 dfc3ae917b149ca7098c7bfa1ec45e0edb6b2157967be248d0be933153d4f201
MD5 06e3e6ea166ebcfc5c77161ff5667194
SHA1 079d477ab726034a1d5957969f715f36594f7cf4
SHA512 c1cdb9538350021032d3abb1eae741904eb5bc1346b3d07e317804c3dfa02c200951bb3a37b7d6d8a684bb161d34770fc3b03e5701dcff2a62345f6638381ad8
TLSH
T17941223649609837676595BB5D7B83508F306197CC52803DFC0D06AAEFC6270D342FE6
MD5 SHA1 SHA512 TLSH

soc-framework-nist-ir/Playbooks/SOC_Workload_Recovery_V3.yml

SHA256 af30ad80d636d71c86f6125b957ac39f4d88486ac0481dea36935a7f52ed911d
MD5 38da78ed3dc641f85c2c6cf297691df8
SHA1 415b5088c963ad5c5c9b412fd14dd581d49346a8
SHA512 375d116a86486a19e771b2f985baee48285d202573cad9b37be6519d9c2b0081be9e5260ff17efef62f8f4258d0cf01d40786ee1929fa26480a5152eab9345c9
TLSH
T1BA413035596098379A35A1BB5E7B93108F306197CC52A53EFC0D069AEF86270E282FF5
MD5 SHA1 SHA512 TLSH

soc-framework-nist-ir/README.md

SHA256 fef647158c06b5d0fe9d77f6c255e1a6252d9db88d3a947f1caf539fc3c2490e
MD5 7232655c49601c9e0e52e36fef647dbf
SHA1 a936e7203691e6793c7721a479558d1f43271f4d
SHA512 5ca37f5733751d90ce95d38ba5314b840f81215e101c5c0082cb469581a59ec5a238cb063398d3b1af683429b8384a9a03c077ab874fd6d4801dc17b23fd8d9f
SSDEEP 384:Bzp8AxGGAlWhZI8EVeJ7sdTFas16+T6oMaBbj:BzpLGGAlWhu8EYJ7ypaG6+eox1
TLSH
T11692A3BA667A22363393C17EB00A6270D7B6F985B5412441785EF40853ECEE4872B7B6
MD5 SHA1 SHA512 SSDEEP TLSH

soc-framework-nist-ir/ReleaseNotes/1_0_0.md

SHA256 0cd03840e38d218ce990b11c795742eb22f93abc4df38a8bb7ac61094dabec0f
MD5 f5679e9fdc4a842ac0db041577f089ed
SHA1 9770ea97b67d86fc32dfefe9c146324002d87dcd
SHA512 03a551340ad793170848b7b8435516d5a45e0c1827c254fa63c9632e0c9ac23a830c16b2ffd408d32e02f6d1863293609afd455abbe1ec4ff6ceadea3a40cdb8
TLSH
T1D151862FB39D03B31A6A82A0A2CD914197318065A63210D8954E894D7776D7AD33FFBD
MD5 SHA1 SHA512 TLSH

soc-framework-nist-ir/ReleaseNotes/1_3_0.md

SHA256 9f4999d3f3ead9c89f50aa0f4f1282f0586388db266cdbcca18f7d96afcda190
MD5 069c2646d4a2e9177926383e9ae0509e
SHA1 523a99aabe17f22c510120fc8101544936d436d5
SHA512 05ad07cabb051ab93f467253ce5f1f58c6aba3884c76640b51346bd9f875f5893de73ade209ff65ce749aa8382da1aeb5e40d2b0f93ee21309ed32c72d90f2f2
SSDEEP 96:mlnWUnfD/v9FdllbMRXNENlUVDSz7tzPH8IC/LUnckSvo:mlndnfDLdlle9ENl4SvtrH8IC/gnTSvo
TLSH
T136A1D85A31FD0358A0A7497279C771B0CFB0D2597A06309444ADC29E632FCA4E73BF49
MD5 SHA1 SHA512 SSDEEP TLSH

soc-framework-nist-ir/ReleaseNotes/1_4_0.md

SHA256 e7c63d35ebec7653b3bf908d87bae0443e4b751f0dc79582f47f7fd696a947c7
MD5 8bba0df8cf22bd4b253fcce7298a6d21
SHA1 bfb26de0ccd3694ebe1393adf5e8cb486e88dd22
SHA512 58394e3fd8004a6785be0c268c74cc8befa0aca11472a960832e48d3464f643c559aa9324cca5412c849d4be9b649e53390548ed898c025c51025950c7084b22
SSDEEP 96:BvimXbNT8/2u3k7O6IyJMQ21s7b6GyxuLNAEEH22vH0j9sG:BvimXJQ/2u3kS/XQN2GyxuGM2vMf
TLSH
T104C1A80774D4D3371BCB4662B687A1569FB6D1E82391386474DDC09C63280E8C76B7E7
MD5 SHA1 SHA512 SSDEEP TLSH

soc-framework-nist-ir/ReleaseNotes/1_4_7.md

SHA256 989afee701725ecc065a0489a97e7f102253cce1c07dc13fd59c04172d0aab23
MD5 39bfb17c8e55e1ee2fc7bf2c25c67f0e
SHA1 bd7f32c7ca2d16eb59969bc8d7883bf250af7350
SHA512 67a1e80981ce4d8a742fe6dea8585cfa80191dcadc5e252f09c6ed07cf8a716a7998ad239416c65ea099307e53d60510a05bac6b8ccd4afad9fbf6e5c0b076bf
TLSH
T1D95163865FA457742663528AF02AF18397F29404E21265D8FCDF800C62BDC6C9367753
MD5 SHA1 SHA512 TLSH

soc-framework-nist-ir/ReleaseNotes/1_6_2.md

SHA256 01184a050c96539edfbc551f403126f4bf54e1abdd68b0aa88bde268b0977577
MD5 26b1348e0a4bd41496098da079558995
SHA1 16f151685be51fbdb2ecd09ca31152d21d622d40
SHA512 fac35fa65078087d447364cc03271545ec3d92e45fae80c5acecd7178cf15bbe083627b48ed943b64b712863c8dae430851fd00efab99e23f69063dee37dd021
TLSH
T1C3E02BEAD49C465115E800D7FF21D1055594D415B22AB29AA838419D1AB0ED4D29634B
MD5 SHA1 SHA512 TLSH

soc-framework-nist-ir/Scripts/SOCFramework_ManualDeisolateEndpoint/SOCFramework_ManualDeisolateEndpoint.py

SHA256 73db801cdfc3768f704de320c6e36330365409b0b594b19e0319fb3f9233ca46
MD5 810d7d2e766adbbda961930521e22eff
SHA1 d9275a3a50993b9def58293ce9ba5b7b153319c7
SHA512 beb67d270e5a12232dec4571d9acbad7c93c892b80aca5a143310ee8e070e8cb3f45d10c47d7f2ac988bdde7040c7252e57e4357674892851ddbaebfbb81a78f
TLSH
T10921E25A9BBA103392CF51EDB86D61436518481768B43BA87DCC11AC2FB8C766CB139D
MD5 SHA1 SHA512 TLSH

soc-framework-nist-ir/Scripts/SOCFramework_ManualDeisolateEndpoint/SOCFramework_ManualDeisolateEndpoint.yml

SHA256 8736b6168adce460eb917249df371e15b56b9ce06a2825e92487922e58c35bb1
MD5 2d1ed5d0e8c8b5de646ccb6f97e5c396
SHA1 962ccf7c85b0e35edd926d1d52969343320ae8cf
SHA512 a5a62d07f9d38cae2505fe315768b9f5d6d7098269b10b6aaa55a40d0c86ff6184582ce1ef1db8c07fe931ab2824139a004b7214a4dbcc5e9501e97dbe20782b
TLSH
T147214410E761703600A6829EB11B21070AB18163F170A69DBED501AE7FE4AFA68A3B15
MD5 SHA1 SHA512 TLSH

soc-framework-nist-ir/Scripts/SOCFramework_ManualIsolateEndpoint/SOCFramework_ManualIsolateEndpoint.py

SHA256 cbd4e662ce4c2f47810989b7984a67e48e39cc1cd255ee5f621d3a26b25916c6
MD5 51abbe8f5c6f478ba5631f1c617da0ab
SHA1 2b2f930e70b009633dc69db288cd1d588f447d61
SHA512 eee8df4eb4c0cf2fb4ba86ac3a7d98b9a44306d1d199c35f5524a2f8388b6f4a470523a9fa02e721eb991f36bef77b296c6f2e4f8ca096847c16d4531f4d6015
TLSH
T19F21E25A9BBA103392DF50EDB86D6143651948176CB42BA83DCC11AD2FB8C762CB139D
MD5 SHA1 SHA512 TLSH

soc-framework-nist-ir/Scripts/SOCFramework_ManualIsolateEndpoint/SOCFramework_ManualIsolateEndpoint.yml

SHA256 462c52b97ac3f4c5b5157872eff569c96ca3fc80a14f42b5de2b554a4988ab29
MD5 19ce903edf0847c5f91c56e37c892f12
SHA1 56d82a8290dec688f99b8a2505de59156694763e
SHA512 d740f879f87daa1390f866cd9c0279ed4015a1492789de45055889ab4672135f558b496b32ae4a3146a87908236f07e898bee848defd39354f3877bac4542f1b
TLSH
T179214410E761703600A6819AB01B21060AB18163F17096AE3DD501AE7FE4AFA68A3B15
MD5 SHA1 SHA512 TLSH

soc-framework-nist-ir/Scripts/SOCFramework_displayAnalysis/SOCFramework_displayAnalysis.py

SHA256 6e3375ed069994f45455b426a338803803a9abcf43075dd9a02a8ea04c74eec8
MD5 074fa3d5a5b44c4824015863c5b4ee56
SHA1 a73c48781fdea50b608b595ef96146f65b6458c6
SHA512 12e9721ac74d10bebb54d561f717e3706dbb60eb135e3ead8da3b9d36924d77529a997d6d66b4f5bb055c847edd19abb07ebbb3756e1d72602a79a3a1f697bdc
SSDEEP 96:6y1I+uG/nR5xtBzbBt8DnHSXmXZ7jtDJgSkDWO5Z7jml:D1ZuGvR5xtp+yXmXZPtdgS0WO5ZPml
TLSH
T14BB18416855A203243DB80EDB8CBD447B3202A1393482D547DEE2E58AFC9EBBA1F135D
MD5 SHA1 SHA512 SSDEEP TLSH

soc-framework-nist-ir/Scripts/SOCFramework_displayAnalysis/SOCFramework_displayAnalysis.yml

SHA256 b6934e70c1c5514d8a0eb0a3ff4d39b23cce505ffe8f94df319d2102a46ae058
MD5 63ad40275bac83d87be6da542a5cb2f7
SHA1 b20be06d5cebe1de0e6a3a450bca82819cba0140
SHA512 1c45a3359ae00eeba494db69ad4e03face326bee985f014b07bba16844a39063b2c5608562327b95cb2c5c5e0415473575e48adeb1d1b2e289bc5a45fdac780c
TLSH
T144012511E650707A5495C29DB00773070FE08573F41485AEBED04216AFD9EE670E1F14
MD5 SHA1 SHA512 TLSH

soc-framework-nist-ir/Scripts/SOCFramework_displayContainment/SOCFramework_displayContainment.py

SHA256 c9797ba44009dc04c17bf456e2e4908aea7825be64b3d04e1aa272e479ae3062
MD5 77c8bfebd49c980420f6526244cdff06
SHA1 a83ec5b6bc4e1f2471cdbde8df70d762cc00493a
SHA512 5914a2472bc4c4f17e9cd6ff3de0d23e5dd9b359a16509db3cfc519157d2a848207cc306065570a2bc522a207633af86c372f45488236069c858ab33040fa467
TLSH
T141711161E6A134321BDF805D7897909B67246633C3442E247CAE759C6FF4EB942F268C
MD5 SHA1 SHA512 TLSH

soc-framework-nist-ir/Scripts/SOCFramework_displayContainment/SOCFramework_displayContainment.yml

SHA256 d0dfcc5a114fdcee1c258dc883919652b0571a180d6905bcc794ca748f65bdc0
MD5 1963258282e7a61cc7655a976513ca9e
SHA1 7ec5c7cd5eaa37ab85813a8886dedfb4d3d4e27b
SHA512 6365ab371852e36b014f7d70b972013b032a77737eb940d9b728b1334575727d6770169127be6b9da440f78593e006c586f7dec5b4e834b67fb58d97f65b4829
TLSH
T18101F110F67070765595C29DB00772070FE08663B61589BDBEE04156AFD9EA670A1B15
MD5 SHA1 SHA512 TLSH

soc-framework-nist-ir/Scripts/SOCFramework_displayEndpointStatus/SOCFramework_displayEndpointStatus.py

SHA256 2413e75a01ca1bd4668e55ab2de431474dfd63f41d0a5baa61d87bd5a3b9e87a
MD5 f07172db8e1aab58619a2e19c7902f70
SHA1 a51d3c0f36aa90a881e14208d288299df3b1c2e6
SHA512 76b55b1a2159f9e62794c97a0c885226e296ccb31f40754015a5d7c6f448a4cedfe6f19840449ef890d3373081b7dd91924dad508ff9f1bad0f30aa312c236af
TLSH
T1A471E271D924086153CB929C686A71739F10A533DA482D6C7D9C93EC4FECD3A61B62CD
MD5 SHA1 SHA512 TLSH

soc-framework-nist-ir/Scripts/SOCFramework_displayEndpointStatus/SOCFramework_displayEndpointStatus.yml

SHA256 d5871f12d4c5cd62af6b059ddbb1e8d8e453f7de4e9dbe3a1dd4df593d3f8f7b
MD5 4d7892d2779c0adcd1a1dd442f6d9e40
SHA1 d7a3deb14e404953566ba2a787d120ec88d106cc
SHA512 efa4fbe84485baa4930fa8aa71c041484e4437fb6ec9c0217a5f4c610f6706679db6e0604ea4c9524d85d1b92abba95de613d3a6c21cd25f58deb20c1ac29ebd
TLSH
T11B01F110E791607B5899C599B00772070EA08463B41589ADBED1411BFFD9BEAB4B1F14
MD5 SHA1 SHA512 TLSH

soc-framework-nist-ir/Scripts/SOCFramework_displayEradication/SOCFramework_displayEradication.py

SHA256 6b58b57decbbc696831d9ae81fe373ea1e0629a0fdad93c37a259c346625e32c
MD5 16b8b375ef7b6d0809a788f24da947e3
SHA1 f3a4c93e368906b50f9f3b2ab914bf7a831138f3
SHA512 708b4f532c9d42c071962a2da52008b14ef52c1da04b3d89fc5543c69666f82fa903302a4bb588bb72d7cdde23f523c0acf9a27863c8b6735b7798dab0c1d6cf
TLSH
T15C5143A2E6E1203157E780AEB8C79087AB3465339204192438DE75986F94E7643F27AD
MD5 SHA1 SHA512 TLSH

soc-framework-nist-ir/Scripts/SOCFramework_displayEradication/SOCFramework_displayEradication.yml

SHA256 8266d7268ff6621a3fa2724d48f038b56b2c7b3cdc75528a42afb90ce8102570
MD5 996ae3ab5bb77390a1a3e11c79f676bc
SHA1 f84bb6f78a4dd5c771af17abd82c4d2881020f42
SHA512 9623b35aca42a1abf784407bf6e4f43488055ee67eb61f444ddec9a05a2e6fd6d11309740174cfd2b9e2cbd2e111b760e31ab5c2b8294062ec9336d9bd7aaeb3
TLSH
T1C2014D10E62130772596C1BAB01272070EA08063B82486AEBEA00126AFE8AA770A2B05
MD5 SHA1 SHA512 TLSH

soc-framework-nist-ir/Scripts/SOCFramework_displayRecovery/SOCFramework_displayRecovery.py

SHA256 d782cf8c8232b3d3ddf3dd3f827ce466883141501ae534474dbe02576c9b168e
MD5 7cb6cc1ea10921d8d431de243f5b7e39
SHA1 b66e381293554b5d5bd253aa81c6b4c6193d3eab
SHA512 dbb0404fc56775f96fb246a2c6156a6a0ddbfadc8c4c6b5b27ab353782b5d5d53b1a0f6b8dbee31fcf8a3568427569cf9b4269e7319a7d8d4ada456ffdef1dd7
TLSH
T1BE611196D25130734FCBD0AEBCC6D00B6B347563E304291C7C9F26986FA4A6243F26AC
MD5 SHA1 SHA512 TLSH

soc-framework-nist-ir/Scripts/SOCFramework_displayRecovery/SOCFramework_displayRecovery.yml

SHA256 d17fad1e746e144a058dd6c7bf27c39ed7ad7c42705e1b2ff255f73cd02c2315
MD5 0f14ac7cd13b7275ec4edebadeedebec
SHA1 783cfb2dbe927401ef3c6f3faf8e0136c8553adc
SHA512 476b238eac81bd0ac0af1b0696c29daf719aa05b73b89bfe7e3e67929397c4f79524eae72be5d116022ba192b0f7605b8e246962da58b6053198c054c4f47da4
TLSH
T13F012510F69170B654D6C19AF007B3070FE08463F81485ADBED04156AFE9EE670A2F64
MD5 SHA1 SHA512 TLSH

soc-framework-nist-ir/Scripts/SOCInitializePhaseContext/SOCInitializePhaseContext.py

SHA256 5f23526849e19c64a19071857eeffeb60d49f6b348580067b42219e874ab5726
MD5 78377ec6fed078a0ba1c44cc7435ac98
SHA1 80e55f3882e33c2dee886befde014c0fe5cf0c3c
SHA512 2f101114893b7d9cac88f9cb15dd3a8bbc1dc42e1767abb83564a4e0434fe4ea8b484fb08abf10a717854f2a16cff5a848e8ecd12d7b7053f37d23d415c580f2
SSDEEP 192:Q8s4/C9tOTcXYX+az+Bdoy7x32OaiCbkRU7UhK+uB0NytiBGiVl:QN4HXn+BdF7x37akRUCK+uB00ty
TLSH
T19B12873AEE9A69635382C1AC5043C213DB01D4A3870919B0BC5DC1F82FD5A9547BF7EC
MD5 SHA1 SHA512 SSDEEP TLSH

soc-framework-nist-ir/Scripts/SOCInitializePhaseContext/SOCInitializePhaseContext.yml

SHA256 ff34af335a0aa4c2d433aad4b38365454d3aa8a9e1bffe25f1c1787ffc958178
MD5 ba99fe7dfac05382b03bee53aca5e178
SHA1 5e1b82382bd0ed578140038a8e1aafd294b326d9
SHA512 bd06104f9a2f57bca6cb75b84a966ca4579b87e6d5a2aab32a1c2d72af5115bb9ded7392d08eaf76952c432680ce45c5befce6b8761571591266f4aa70a29afa
TLSH
T111215469A99571338A40C596A23BA0074F90E873FAA46BD63DCD52715FC06C16363FB8
MD5 SHA1 SHA512 TLSH

soc-framework-nist-ir/Scripts/SOCInitializePhaseContext/SOCInitializePhaseContext_test.py

SHA256 175d9bc57e5ff6243c79ff4feb7172d6c3d20873a1d6b61dfac7c1c5498d996e
MD5 4b305fcc857a4cffd89e1c9b60442925
SHA1 3be6630084535b054566dc1ada3a4ad785033c63
SHA512 e7766b993d289026a992db1a053472cd58404b09ce30db858fa98145e3cc2b3e3772b863afe3d2465d09bd113b22e8acc6fb09729d79be1031cc0fb85da4ce0f
SSDEEP 192:ivGtyQL2+IL020DQURIYoIWIYSmcH6hhh7Q/MxkH7vRrcKy875bOzB0e3N35uKs6:iutyj+IgpDhRIYKIYSmfzhM/VbvRgKyX
TLSH
T18F22651995A7B53782C151D4B2484353DB258EB28BC40E90BDEECAAC079DCD4419FBAE
MD5 SHA1 SHA512 SSDEEP TLSH

soc-framework-nist-ir/Scripts/SOCSummarizePhase/SOCSummarizePhase.py

SHA256 7da94aaeb835c12fcc05297b0369456d1c8ef463c4cb953dffd0636a32544628
MD5 df3617dcb70f5a9b48cbbf878a059765
SHA1 fc8ca03b148544ad45f3c6c7810e751ac4521169
SHA512 e0f71ae368dc347ed666a19310035c8b1697f61393607ddf70384bffa3d2fc68bc75e0579bc404282f420ac826756b09a4ae2d51ecd0e1e53e1f4646f7689227
SSDEEP 192:Cx8Qahta48cDc37ACVu6vA7Qbgv8EkEOdmC5BsyEsnjnpNOoELemUV894yz18QS9:c9sBTrQnjnF7V8zm1
TLSH
T158024115FC29143167C3C3ADB4179291F7668567DA0C6820FC9CD2E81F88DE143BEAEA
MD5 SHA1 SHA512 SSDEEP TLSH

soc-framework-nist-ir/Scripts/SOCSummarizePhase/SOCSummarizePhase.yml

SHA256 971df9f91d3fca5ff8001f52e3c6cead201aa427ece3853570ecb0f46df8fc1c
MD5 53e0e7dbd1a698e1dbbb5cbbe3adfd92
SHA1 864a0c295423847c55f035690d7b171644e3a904
SHA512 14a13d1dc09275a9b558929a417c3596a5540afec1e2316d92d91ee8df36c28c923458f29d94b533a71651cb33c4e2c57bce67bd0ecc548848b255c8ac486999
TLSH
T16D315511242170326BC3C7979117A2D19770E573F85D926ABCD952F44FC48D2A2637E5
MD5 SHA1 SHA512 TLSH

soc-framework-nist-ir/pack_metadata.json

SHA256 e5355f0523eda4d5b0359053bd6382f44a4f5aa76bca5da757a3aa98a0ff5480
MD5 ac67f1c60e9896401cad590432ee1347
SHA1 429039479e002d0902a4483444f62840ace87048
SHA512 8b5a465eaa86ed2d87571685a5e3305bc6d60e3db8201b942867c45fb5d4003385a398869aea6b07bee7571e4cadcba478c2f6eee2e55cc5b5e517eac260e703
TLSH
T18FF0DDBAC5381C2241F432D6B0208343A3904E6BF9C0FAC9366B061C939D5B7227935E
MD5 SHA1 SHA512 TLSH

Sharing

General

Malware Config

Signatures

File Explorer

soc-framework-nist-ir-v1.6.6.zip

soc-framework-nist-ir/Author_image.png

soc-framework-nist-ir/IncidentFields/incidentfield-Analysis_Blast_Radius.json

soc-framework-nist-ir/IncidentFields/incidentfield-Analysis_Case_Risk_Score.json

soc-framework-nist-ir/IncidentFields/incidentfield-Analysis_Response_Recommendation.json

soc-framework-nist-ir/IncidentFields/incidentfield-Analysis_Spread_Level.json

soc-framework-nist-ir/IncidentFields/incidentfield-Analysis_Story.json

soc-framework-nist-ir/IncidentFields/incidentfield-Analysis_Timestamp.json

soc-framework-nist-ir/IncidentFields/incidentfield-Containment_Actions.json

soc-framework-nist-ir/IncidentFields/incidentfield-Containment_Story.json

soc-framework-nist-ir/IncidentFields/incidentfield-Containment_Timestamp.json

soc-framework-nist-ir/IncidentFields/incidentfield-Eradication_Actions.json

soc-framework-nist-ir/IncidentFields/incidentfield-Eradication_Story.json

soc-framework-nist-ir/IncidentFields/incidentfield-Eradication_Timestamp.json

soc-framework-nist-ir/IncidentFields/incidentfield-Recovery_Actions.json

soc-framework-nist-ir/IncidentFields/incidentfield-Recovery_Story.json

soc-framework-nist-ir/IncidentFields/incidentfield-Recovery_Timestamp.json

soc-framework-nist-ir/Layouts/layoutscontainer-SOCFramework_NIST_IR_Layout.json

soc-framework-nist-ir/Lists/SOCFrameworkEnrichmentMap_NIST_IR/SOCFrameworkEnrichmentMap_NIST_IR.json

soc-framework-nist-ir/Lists/SOCFrameworkEnrichmentMap_NIST_IR/SOCFrameworkEnrichmentMap_NIST_IR_data.json

soc-framework-nist-ir/Lists/SOCFrameworkNormalizeMap_NIST_IR/SOCFrameworkNormalizeMap_NIST_IR.json

soc-framework-nist-ir/Lists/SOCFrameworkNormalizeMap_NIST_IR/SOCFrameworkNormalizeMap_NIST_IR_data.json

soc-framework-nist-ir/Lists/SOCFrameworkPhaseContract_V3/SOCFrameworkPhaseContract_V3.json

soc-framework-nist-ir/Lists/SOCFrameworkPhaseContract_V3/SOCFrameworkPhaseContract_V3_data.json

soc-framework-nist-ir/POST_CONFIG_README.md

soc-framework-nist-ir/Playbooks/EP_IR_NIST_(800-61)_V3.yml

soc-framework-nist-ir/Playbooks/SOC_Analysis_Evaluation_V3.yml

soc-framework-nist-ir/Playbooks/SOC_Analysis_V3.yml

soc-framework-nist-ir/Playbooks/SOC_Approval_Gate_V3.yml

soc-framework-nist-ir/Playbooks/SOC_Containment_Evaluation_V3.yml

soc-framework-nist-ir/Playbooks/SOC_Containment_V3.yml

soc-framework-nist-ir/Playbooks/SOC_Data_Analysis_V3.yml

soc-framework-nist-ir/Playbooks/SOC_Data_Containment_V3.yml

soc-framework-nist-ir/Playbooks/SOC_Data_Eradication_V3.yml

soc-framework-nist-ir/Playbooks/SOC_Data_Recovery_V3.yml

soc-framework-nist-ir/Playbooks/SOC_Email_Analysis_V3.yml

soc-framework-nist-ir/Playbooks/SOC_Email_Containment_V3.yml

soc-framework-nist-ir/Playbooks/SOC_Email_Eradication_V3.yml

soc-framework-nist-ir/Playbooks/SOC_Email_Exposure_Evaluation_V3.yml

soc-framework-nist-ir/Playbooks/SOC_Email_Forensics_Evaluation_V3.yml

soc-framework-nist-ir/Playbooks/SOC_Email_IOC_Enrichment_V3.yml

soc-framework-nist-ir/Playbooks/SOC_Email_Recovery_V3.yml

soc-framework-nist-ir/Playbooks/SOC_Email_Signal_Characterization_V3.yml

soc-framework-nist-ir/Playbooks/SOC_Email_Spread_Evaluation_V3.yml

soc-framework-nist-ir/Playbooks/SOC_Email_Verdict_Resolution_V3.yml

soc-framework-nist-ir/Playbooks/SOC_EndPoint_Analysis_V3.yml

soc-framework-nist-ir/Playbooks/SOC_EndPoint_Eradication_V3.yml

soc-framework-nist-ir/Playbooks/SOC_EndPoint_Recovery_V3.yml

soc-framework-nist-ir/Playbooks/SOC_EndPoint_Spread_Evaluation_V3.yml

soc-framework-nist-ir/Playbooks/SOC_Endpoint_Compromise_Evaluation_V3.yml

soc-framework-nist-ir/Playbooks/SOC_Endpoint_Containment_V3.yml

soc-framework-nist-ir/Playbooks/SOC_Endpoint_Signal_Characterization_V3.yml

soc-framework-nist-ir/Playbooks/SOC_Endpoint_Verdict_Resolution_V3.yml

soc-framework-nist-ir/Playbooks/SOC_Eradication_V3.yml

soc-framework-nist-ir/Playbooks/SOC_Identity_Analysis_V3.yml

soc-framework-nist-ir/Playbooks/SOC_Identity_Containment_V3.yml

soc-framework-nist-ir/Playbooks/SOC_Identity_Eradication_V3.yml

soc-framework-nist-ir/Playbooks/SOC_Identity_Recovery_V3.yml

soc-framework-nist-ir/Playbooks/SOC_Initialize_Investigation_Context_V3.yml

soc-framework-nist-ir/Playbooks/SOC_NIST_IR_(800-61)_V3.yml

soc-framework-nist-ir/Playbooks/SOC_Network_Analysis_V3.yml

soc-framework-nist-ir/Playbooks/SOC_Network_Containment_V3.yml

soc-framework-nist-ir/Playbooks/SOC_Network_Eradication_V3.yml

soc-framework-nist-ir/Playbooks/SOC_Network_Recovery_V3.yml

soc-framework-nist-ir/Playbooks/SOC_Recovery_V3.yml

soc-framework-nist-ir/Playbooks/SOC_SaaS_Analysis_V3.yml

soc-framework-nist-ir/Playbooks/SOC_SaaS_Containment_V3.yml

soc-framework-nist-ir/Playbooks/SOC_SaaS_Eradication_V3.yml

soc-framework-nist-ir/Playbooks/SOC_SaaS_Recovery_V3.yml

soc-framework-nist-ir/Playbooks/SOC_Workload_Analysis_V3.yml

soc-framework-nist-ir/Playbooks/SOC_Workload_Containment_V3.yml

soc-framework-nist-ir/Playbooks/SOC_Workload_Eradication_V3.yml

soc-framework-nist-ir/Playbooks/SOC_Workload_Recovery_V3.yml

soc-framework-nist-ir/README.md

soc-framework-nist-ir/ReleaseNotes/1_0_0.md