For some time now, I’ve been sharing a public GitHub repository containing some of the indicators I find within the Matrix storage. Since this is a manual process, I haven’t yet found the time to automate it, I add a few indicators every now and then.
One thing I’ve noticed while working on this repository is that there are clearly close relationships between the kits; this is because the actors are limited in number and often use both new and old indicators (for example, emails and keys used to access external services). By pivoting on these, you can easily link different attacks together.
So I decided to create this page where you can browse the indicators in graphical format:
https://ecarlesi.github.io/ioc
The search field allows you to enter free-form text, which serves as the filter applied to the graph you see.
I hope you find it useful 🙂
Emiliano Carlesi's blog 