Fetches Indicators from Github Repo https://github.com/stamparm/maltrail
Github Maltrail Feed
- Details
- Content
- Dependencies
- Version History
Maltrail is a malicious traffic detection system, utilizing publicly available (black)lists containing malicious and/or generally suspicious trails, along with static trails compiled from various AV reports and custom user defined lists, where trail can be anything from domain name (e.g. zvpprsensinaix.com for Banjori malware), URL (e.g. hXXp://109.162.38.120/harsh02.exe for known malicious executable), IP address (e.g. 185.130.5.231 for known attacker) or HTTP User-Agent header value (e.g. sqlmap for automatic SQL injection and database takeover tool). Also, it uses (optional) advanced heuristic mechanisms that can help in discovery of unknown threats (e.g. new malware). https://github.com/stamparm/maltrail
Integrations
| Name | Description |
|---|---|
| Github Maltrail Feed (Community Contribution) |
Integrations
| Name | Description |
|---|---|
| Github Maltrail Feed (Community Contribution) | Fetches Indicators from Github Repo https://github.com/stamparm/maltrail |
Required Content Packs (1)
| Pack Name | Pack By |
|---|---|
| Base | By: Cortex XSOAR |
Optional Content Packs (0)
| Pack Name | Pack By |
|---|
All level dependencies (2)
| Pack Name | Pack By |
|---|---|
| Base | By: Cortex XSOAR |
| Aggregated Scripts | By: Cortex XSOAR |
PLATFORMS
Cortex XSOARCortex XSIAM
INFO
| Supported By | Community | |
| Created | November 6, 2023 | |
| Last Release | March 22, 2026 |
WORKS WITH THE FOLLOWING INTEGRATIONS:
