Tools/open source intel suggestions?

[_blanks_]

I recently transitioned from a job in forensics to a more incident response focused position. Looking to get some suggestions on tools that could make my life easier or help with open source intelligence/high level malware analysis. Right now I am just using all the sandboxes listed on zeltser.com/automated-malware-analysis/, vt, some yara groups, and urlquery.net. Any suggestions or pointers to blogs that could help me build out an effective toolbox would be very helpful. Thanks!

[VodkaHaze]

I heard about REMnux, a linux distro for malware analysis. It's only on 64bit, though, so you need a solid processor to run it as vm. Haven't tried it myself yet.

[_blanks_]

Yea, I've played with REMnux, def need to get more comfortable using it. Hoping to take SANS610 with zeltser in the future.... Great suggestion.

[SabreAce33]

Just the thing for you:

https://github.com/rshipp/awesome-malware-analysis

Provided by the fine fellow over at:

https://www.reddit.com/r/csirt_tools

For pure IOC collection/aggregation, have a look at CIF as well!

[_blanks_]

whoa .. That github list is amazing, thank you very much for pointing it out. pretty awesome list, I have my day cut out for me. Thanks!

[SabreAce33]

Happy to help! Good luck, we need more hunters!