Skip to content

Instantly share code, notes, and snippets.

@Neo23x0
Last active September 29, 2024 19:00
Show Gist options
  • Save Neo23x0/c4f40629342769ad0a8f3980942e21d3 to your computer and use it in GitHub Desktop.
Save Neo23x0/c4f40629342769ad0a8f3980942e21d3 to your computer and use it in GitHub Desktop.
Sources for APT Groups and Operations Search Engine
<?xml version="1.0" encoding="UTF-8"?>
<Annotations start="0" num="171" total="171">
<Annotation about="www.bussink.net/*" timestamp="0x0005d7bc4022b026" href="ChF3d3cuYnVzc2luay5uZXQvKhCm4IqBxPf1Ag">
<Label name="_cse_turlh5vi4xc"/>
<AdditionalData attribute="original_url" value="https://www.bussink.net/"/>
</Annotation>
<Annotation about="*.thedfirreport.com/*" timestamp="0x0005d76dd5f8679d" href="ChUqLnRoZWRmaXJyZXBvcnQuY29tLyoQnc_hr93t9QI">
<Label name="_cse_turlh5vi4xc"/>
<AdditionalData attribute="original_url" value="https://thedfirreport.com/"/>
</Annotation>
<Annotation about="www.zerodayinitiative.com/blog/*" timestamp="0x0005cc990a000f3e" href="CiB3d3cuemVyb2RheWluaXRpYXRpdmUuY29tL2Jsb2cvKhC-noDQkJPzAg">
<Label name="_cse_turlh5vi4xc"/>
<AdditionalData attribute="original_url" value="https://www.zerodayinitiative.com/blog/"/>
</Annotation>
<Annotation about="codewhitesec.blogspot.com/*" timestamp="0x0005cc9908539282" href="Chtjb2Rld2hpdGVzZWMuYmxvZ3Nwb3QuY29tLyoQgqXOwpCT8wI">
<Label name="_cse_turlh5vi4xc"/>
<AdditionalData attribute="original_url" value="https://codewhitesec.blogspot.com/"/>
</Annotation>
<Annotation about="www.digitalshadows.com/blog-and-research/*" timestamp="0x0005cc938426ea6f" href="Cip3d3cuZGlnaXRhbHNoYWRvd3MuY29tL2Jsb2ctYW5kLXJlc2VhcmNoLyoQ79SbobiS8wI">
<Label name="_cse_turlh5vi4xc"/>
<AdditionalData attribute="original_url" value="https://www.digitalshadows.com/blog-and-research/"/>
</Annotation>
<Annotation about="blog.talosintelligence.com/*" timestamp="0x0005cc9203130efd" href="ChxibG9nLnRhbG9zaW50ZWxsaWdlbmNlLmNvbS8qEP2dzJigkvMC">
<Label name="_cse_turlh5vi4xc"/>
<AdditionalData attribute="original_url" value="https://blog.talosintelligence.com/"/>
</Annotation>
<Annotation about="www.riskiq.com/blog/*" timestamp="0x0005cc91f4263f77" href="ChV3d3cucmlza2lxLmNvbS9ibG9nLyoQ9_6YoZ-S8wI">
<Label name="_cse_turlh5vi4xc"/>
<AdditionalData attribute="original_url" value="https://www.riskiq.com/blog/"/>
</Annotation>
<Annotation about="www.sekoia.io/en/blog-sekoia-io/*" timestamp="0x0005cc91f20c70bc" href="CiF3d3cuc2Vrb2lhLmlvL2VuL2Jsb2ctc2Vrb2lhLWlvLyoQvOGxkJ-S8wI">
<Label name="_cse_turlh5vi4xc"/>
<AdditionalData attribute="original_url" value="https://www.sekoia.io/en/blog-sekoia-io/"/>
</Annotation>
<Annotation about="www.nextron-systems.com/blog/*" timestamp="0x0005cc91402bde2c" href="Ch53d3cubmV4dHJvbi1zeXN0ZW1zLmNvbS9ibG9nLyoQrLyvgZSS8wI">
<Label name="_cse_turlh5vi4xc"/>
<AdditionalData attribute="original_url" value="https://www.nextron-systems.com/blog/"/>
</Annotation>
<Annotation about="www.microsoft.com/security/blog/*" timestamp="0x0005cc913e1ee7b8" href="CiF3d3cubWljcm9zb2Z0LmNvbS9zZWN1cml0eS9ibG9nLyoQuM_78JOS8wI">
<Label name="_cse_turlh5vi4xc"/>
<AdditionalData attribute="original_url" value="https://www.microsoft.com/security/blog/"/>
</Annotation>
<Annotation about="blog.truesec.com/*" timestamp="0x0005cc913ad962f2" href="ChJibG9nLnRydWVzZWMuY29tLyoQ8sXl1pOS8wI">
<Label name="_cse_turlh5vi4xc"/>
<AdditionalData attribute="original_url" value="https://blog.truesec.com/"/>
</Annotation>
<Annotation about="inquest.net/blog/*" timestamp="0x0005cc9137362cae" href="ChJpbnF1ZXN0Lm5ldC9ibG9nLyoQrtnYuZOS8wI">
<Label name="_cse_turlh5vi4xc"/>
<AdditionalData attribute="original_url" value="https://inquest.net/blog/"/>
</Annotation>
<Annotation about="www.huntress.com/blog/*" timestamp="0x0005cc9133a2ac6f" href="Chd3d3cuaHVudHJlc3MuY29tL2Jsb2cvKhDv2Iqdk5LzAg">
<Label name="_cse_turlh5vi4xc"/>
<AdditionalData attribute="original_url" value="https://www.huntress.com/blog/"/>
</Annotation>
<Annotation about="www.rapid7.com/blog/*" timestamp="0x0005cc9132eecedc" href="ChV3d3cucmFwaWQ3LmNvbS9ibG9nLyoQ3J27l5OS8wI">
<Label name="_cse_turlh5vi4xc"/>
<AdditionalData attribute="original_url" value="https://www.rapid7.com/blog/"/>
</Annotation>
<Annotation about="us-cert.cisa.gov/ncas/current-activity*" timestamp="0x0005cc9131e1b5a8" href="Cid1cy1jZXJ0LmNpc2EuZ292L25jYXMvY3VycmVudC1hY3Rpdml0eSoQqOuGj5OS8wI">
<Label name="_cse_turlh5vi4xc"/>
<AdditionalData attribute="original_url" value="https://us-cert.cisa.gov/ncas/current-activity"/>
</Annotation>
<Annotation about="blog.orange.tw/*" timestamp="0x0005cc912d60acbc" href="ChBibG9nLm9yYW5nZS50dy8qELzZguuSkvMC">
<Label name="_cse_turlh5vi4xc"/>
<AdditionalData attribute="original_url" value="https://blog.orange.tw/"/>
</Annotation>
<Annotation about="www.wiz.io/blog/*" timestamp="0x0005cc912c1c7cfa" href="ChF3d3cud2l6LmlvL2Jsb2cvKhD6-fHgkpLzAg">
<Label name="_cse_turlh5vi4xc"/>
<AdditionalData attribute="original_url" value="https://www.wiz.io/blog/"/>
</Annotation>
<Annotation about="twitter.com/i/lists/201875823*" timestamp="0x0005cc91262140ef" href="Ch50d2l0dGVyLmNvbS9pL2xpc3RzLzIwMTg3NTgyMyoQ74GFsZKS8wI">
<Label name="_cse_turlh5vi4xc"/>
<AdditionalData attribute="original_url" value="https://twitter.com/i/lists/201875823"/>
</Annotation>
<Annotation about="www.recordedfuture.com/blog/*" timestamp="0x0005cc911d5d9295" href="Ch13d3cucmVjb3JkZWRmdXR1cmUuY29tL2Jsb2cvKhCVpfbqkZLzAg">
<Label name="_cse_turlh5vi4xc"/>
<AdditionalData attribute="original_url" value="https://www.recordedfuture.com/blog/"/>
</Annotation>
<Annotation about="www.clearskysec.com/blog/*" timestamp="0x0005c5497f4988ba" href="Chp3d3cuY2xlYXJza3lzZWMuY29tL2Jsb2cvKhC6kab6l6nxAg">
<Label name="_cse_turlh5vi4xc"/>
<AdditionalData attribute="original_url" value="https://www.clearskysec.com/blog/"/>
</Annotation>
<Annotation about="unit42.paloaltonetworks.com/*" timestamp="0x0005c5497da14f77" href="Ch11bml0NDIucGFsb2FsdG9uZXR3b3Jrcy5jb20vKhD3noXtl6nxAg">
<Label name="_cse_turlh5vi4xc"/>
<AdditionalData attribute="original_url" value="https://unit42.paloaltonetworks.com/"/>
</Annotation>
<Annotation about="us-cert.cisa.gov/ncas/*" timestamp="0x0005c5497b0d0dc0" href="Chd1cy1jZXJ0LmNpc2EuZ292L25jYXMvKhDAm7TYl6nxAg">
<Label name="_cse_turlh5vi4xc"/>
<AdditionalData attribute="original_url" value="https://us-cert.cisa.gov/ncas/"/>
</Annotation>
<Annotation about="www.volexity.com/blog/feed/*" timestamp="0x0005c5497a61ea24" href="Chx3d3cudm9sZXhpdHkuY29tL2Jsb2cvZmVlZC8qEKTUh9OXqfEC">
<Label name="_cse_turlh5vi4xc"/>
<AdditionalData attribute="original_url" value="https://www.volexity.com/blog/feed/"/>
</Annotation>
<Annotation about="www.fireeye.com/blog/*" timestamp="0x0005c549788c5a79" href="ChZ3d3cuZmlyZWV5ZS5jb20vYmxvZy8qEPm0scSXqfEC">
<Label name="_cse_turlh5vi4xc"/>
<AdditionalData attribute="original_url" value="https://www.fireeye.com/blog/"/>
</Annotation>
<Annotation about="nakedsecurity.sophos.com/feed/*" timestamp="0x0005c5497799dc13" href="Ch9uYWtlZHNlY3VyaXR5LnNvcGhvcy5jb20vZmVlZC8qEJO457yXqfEC">
<Label name="_cse_turlh5vi4xc"/>
<AdditionalData attribute="original_url" value="https://nakedsecurity.sophos.com/feed/"/>
</Annotation>
<Annotation about="blog.malwarebytes.com/*" timestamp="0x0005c54976c44a81" href="ChdibG9nLm1hbHdhcmVieXRlcy5jb20vKhCBlZG2l6nxAg">
<Label name="_cse_turlh5vi4xc"/>
<AdditionalData attribute="original_url" value="https://blog.malwarebytes.com/"/>
</Annotation>
<Annotation about="labs.sentinelone.com/*" timestamp="0x0005c5497635d00a" href="ChZsYWJzLnNlbnRpbmVsb25lLmNvbS8qEIqg17GXqfEC">
<Label name="_cse_turlh5vi4xc"/>
<AdditionalData attribute="original_url" value="https://labs.sentinelone.com/"/>
</Annotation>
<Annotation about="labs.sentinelone.com/feed/*" timestamp="0x0005c54975722aae" href="ChtsYWJzLnNlbnRpbmVsb25lLmNvbS9mZWVkLyoQrtXIq5ep8QI">
<Label name="_cse_turlh5vi4xc"/>
<AdditionalData attribute="original_url" value="https://labs.sentinelone.com/feed/"/>
</Annotation>
<Annotation about="www.welivesecurity.com/*" timestamp="0x0005c54973c3d851" href="Chh3d3cud2VsaXZlc2VjdXJpdHkuY29tLyoQ0bCPnpep8QI">
<Label name="_cse_turlh5vi4xc"/>
<AdditionalData attribute="original_url" value="https://www.welivesecurity.com/"/>
</Annotation>
<Annotation about="*.securelist.com/*" timestamp="0x0005c54972a00bfe" href="ChIqLnNlY3VyZWxpc3QuY29tLyoQ_peAlZep8QI">
<Label name="_cse_turlh5vi4xc"/>
<AdditionalData attribute="original_url" value="https://securelist.com/"/>
</Annotation>
<Annotation about="threatpost.com/feed/*" timestamp="0x0005c5497203f9a1" href="ChV0aHJlYXRwb3N0LmNvbS9mZWVkLyoQofOPkJep8QI">
<Label name="_cse_turlh5vi4xc"/>
<AdditionalData attribute="original_url" value="https://threatpost.com/feed/"/>
</Annotation>
<Annotation about="www.bleepingcomputer.com/feed/*" timestamp="0x0005c549717eae2b" href="Ch93d3cuYmxlZXBpbmdjb21wdXRlci5jb20vZmVlZC8qEKvc-ouXqfEC">
<Label name="_cse_turlh5vi4xc"/>
<AdditionalData attribute="original_url" value="https://www.bleepingcomputer.com/feed/"/>
</Annotation>
<Annotation about="bartblaze.blogspot.de/*" timestamp="0x00056cf2bce3eca9" href="ChdiYXJ0YmxhemUuYmxvZ3Nwb3QuZGUvKhCp2Y_nq57bAg">
<Label name="_cse_turlh5vi4xc"/>
<AdditionalData attribute="original_url" value="https://bartblaze.blogspot.de/"/>
</Annotation>
<Annotation about="*.401trg.pw/*" timestamp="0x00056c69af232729" href="Cg0qLjQwMXRyZy5wdy8qEKnOjPmajdsC">
<Label name="_cse_turlh5vi4xc"/>
<AdditionalData attribute="original_url" value="https://401trg.pw/"/>
</Annotation>
<Annotation about="decalage.info/en/security*" timestamp="0x00056c678a15c50b" href="ChpkZWNhbGFnZS5pbmZvL2VuL3NlY3VyaXR5KhCLitfQ-IzbAg">
<Label name="_cse_turlh5vi4xc"/>
<AdditionalData attribute="original_url" value="https://decalage.info/en/security"/>
</Annotation>
<Annotation about="www.hexacorn.com/blog/*" timestamp="0x00056c66ba2859bd" href="Chd3d3cuaGV4YWNvcm4uY29tL2Jsb2cvKhC9s6HR64zbAg">
<Label name="_cse_turlh5vi4xc"/>
<AdditionalData attribute="original_url" value="http://www.hexacorn.com/blog/"/>
</Annotation>
<Annotation about="www.clearskysec.com/blog/*" timestamp="0x00056c66b5b68989" href="Chp3d3cuY2xlYXJza3lzZWMuY29tL2Jsb2cvKhCJk9qt64zbAg">
<Label name="_cse_turlh5vi4xc"/>
<AdditionalData attribute="original_url" value="https://www.clearskysec.com/blog/"/>
</Annotation>
<Annotation about="www.flashpoint-intel.com/blog/*" timestamp="0x00056c66b3034d0e" href="Ch93d3cuZmxhc2hwb2ludC1pbnRlbC5jb20vYmxvZy8qEI6ajZjrjNsC">
<Label name="_cse_turlh5vi4xc"/>
<AdditionalData attribute="original_url" value="https://www.flashpoint-intel.com/blog/"/>
</Annotation>
<Annotation about="wikileaks.org/vault7/*" timestamp="0x00056c66b0d67c96" href="ChZ3aWtpbGVha3Mub3JnL3ZhdWx0Ny8qEJb52YbrjNsC">
<Label name="_cse_turlh5vi4xc"/>
<AdditionalData attribute="original_url" value="https://wikileaks.org/vault7/"/>
</Annotation>
<Annotation about="wikileaks.org/ciav7p1/*" timestamp="0x00056c66afaf9855" href="Chd3aWtpbGVha3Mub3JnL2NpYXY3cDEvKhDVsL796ozbAg">
<Label name="_cse_turlh5vi4xc"/>
<AdditionalData attribute="original_url" value="https://wikileaks.org/ciav7p1/"/>
</Annotation>
<Annotation about="ti.360.net/blog/*" timestamp="0x00056c66aae0d5b5" href="ChF0aS4zNjAubmV0L2Jsb2cvKhC1q4PX6ozbAg">
<Label name="_cse_turlh5vi4xc"/>
<AdditionalData attribute="original_url" value="https://ti.360.net/blog/"/>
</Annotation>
<Annotation about="github.com/pan-unit42/iocs" timestamp="0x000551964c85bc1e" href="ChpnaXRodWIuY29tL3Bhbi11bml0NDIvaW9jcxCe-Jbk5LLUAg">
<Label name="_cse_turlh5vi4xc"/>
<AdditionalData attribute="original_url" value="https://github.com/pan-unit42/iocs"/>
</Annotation>
<Annotation about="github.com/fireeye/iocs" timestamp="0x000551964ba90647" href="ChdnaXRodWIuY29tL2ZpcmVleWUvaW9jcxDHjKTd5LLUAg">
<Label name="_cse_turlh5vi4xc"/>
<AdditionalData attribute="original_url" value="https://github.com/fireeye/iocs"/>
</Annotation>
<Annotation about="github.com/Yara-Rules/rules" timestamp="0x0005519648b595d8" href="ChtnaXRodWIuY29tL1lhcmEtUnVsZXMvcnVsZXMQ2KvWxeSy1AI">
<Label name="_cse_turlh5vi4xc"/>
<AdditionalData attribute="original_url" value="https://github.com/Yara-Rules/rules"/>
</Annotation>
<Annotation about="malware.prevenity.com/*" timestamp="0x000546e754503886" href="ChdtYWx3YXJlLnByZXZlbml0eS5jb20vKhCG8cCi9dzRAg">
<Label name="_cse_turlh5vi4xc"/>
<AdditionalData attribute="original_url" value="http://malware.prevenity.com/"/>
</Annotation>
<Annotation about="blog.malwaremustdie.org/*" timestamp="0x0005408aeb576862" href="ChlibG9nLm1hbHdhcmVtdXN0ZGllLm9yZy8qEOLQ3dqukdAC">
<Label name="_cse_turlh5vi4xc"/>
<AdditionalData attribute="original_url" value="http://blog.malwaremustdie.org/"/>
</Annotation>
<Annotation about="blog.airbuscybersecurity.com/*" timestamp="0x0005408aea73fd53" href="Ch5ibG9nLmFpcmJ1c2N5YmVyc2VjdXJpdHkuY29tLyoQ0_rP066R0AI">
<Label name="_cse_turlh5vi4xc"/>
<AdditionalData attribute="original_url" value="http://blog.airbuscybersecurity.com/"/>
</Annotation>
<Annotation about="www.us-cert.gov/ncas/alerts*" timestamp="0x0005408ae9c05932" href="Chx3d3cudXMtY2VydC5nb3YvbmNhcy9hbGVydHMqELKygc6ukdAC">
<Label name="_cse_turlh5vi4xc"/>
<AdditionalData attribute="original_url" value="https://www.us-cert.gov/ncas/alerts"/>
</Annotation>
<Annotation about="baesystemsai.blogspot.de/*" timestamp="0x0005408ae90342ed" href="ChpiYWVzeXN0ZW1zYWkuYmxvZ3Nwb3QuZGUvKhDthY3IrpHQAg">
<Label name="_cse_turlh5vi4xc"/>
<AdditionalData attribute="original_url" value="https://baesystemsai.blogspot.de/"/>
</Annotation>
<Annotation about="contagiodump.blogspot.de/*" timestamp="0x00054080aa9703fa" href="Chpjb250YWdpb2R1bXAuYmxvZ3Nwb3QuZGUvKhD6h9zUipDQAg">
<Label name="_cse_turlh5vi4xc"/>
<AdditionalData attribute="original_url" value="https://contagiodump.blogspot.de/"/>
</Annotation>
<Annotation about="*.cryptam.com/*" timestamp="0x00054080a9cb5ef9" href="Cg8qLmNyeXB0YW0uY29tLyoQ-b2tzoqQ0AI">
<Label name="_cse_turlh5vi4xc"/>
<AdditionalData attribute="original_url" value="https://cryptam.com/"/>
</Annotation>
<Annotation about="github.com/aptnotes/*" timestamp="0x0005407f3f51202a" href="ChVnaXRodWIuY29tL2FwdG5vdGVzLyoQqsDE-vOP0AI">
<Label name="_cse_turlh5vi4xc"/>
<AdditionalData attribute="original_url" value="https://github.com/aptnotes/"/>
</Annotation>
<Annotation about="www.fidelissecurity.com/threat-advisories*" timestamp="0x0005400975a2dca3" href="Cip3d3cuZmlkZWxpc3NlY3VyaXR5LmNvbS90aHJlYXQtYWR2aXNvcmllcyoQo7mLrZeB0AI">
<Label name="_cse_turlh5vi4xc"/>
<AdditionalData attribute="original_url" value="https://www.fidelissecurity.com/threat-advisories"/>
</Annotation>
<Annotation about="github.com/pan-unit42/iocs/*" timestamp="0x00054009743f40d2" href="ChxnaXRodWIuY29tL3Bhbi11bml0NDIvaW9jcy8qENKB_aGXgdAC">
<Label name="_cse_turlh5vi4xc"/>
<AdditionalData attribute="original_url" value="https://github.com/pan-unit42/iocs/"/>
</Annotation>
<Annotation about="www.paloaltonetworks.com/*" timestamp="0x000540097317e7b7" href="Chp3d3cucGFsb2FsdG9uZXR3b3Jrcy5jb20vKhC3z9-Yl4HQAg">
<Label name="_cse_turlh5vi4xc"/>
<AdditionalData attribute="original_url" value="https://www.paloaltonetworks.com/"/>
</Annotation>
<Annotation about="researchcenter.paloaltonetworks.com/*" timestamp="0x00054009724bd01a" href="CiVyZXNlYXJjaGNlbnRlci5wYWxvYWx0b25ldHdvcmtzLmNvbS8qEJqgr5KXgdAC">
<Label name="_cse_turlh5vi4xc"/>
<AdditionalData attribute="original_url" value="http://researchcenter.paloaltonetworks.com/"/>
</Annotation>
<Annotation about="github.com/pan-unit42/iocs*" timestamp="0x000540096ce72796" href="ChtnaXRodWIuY29tL3Bhbi11bml0NDIvaW9jcyoQls-c55aB0AI">
<Label name="_cse_turlh5vi4xc"/>
<AdditionalData attribute="original_url" value="https://github.com/pan-unit42/iocs"/>
</Annotation>
<Annotation about="github.com/kevthehermit/RATDecoders*" timestamp="0x000540096b566dfb" href="CiRnaXRodWIuY29tL2tldnRoZWhlcm1pdC9SQVREZWNvZGVycyoQ-9vZ2paB0AI">
<Label name="_cse_turlh5vi4xc"/>
<AdditionalData attribute="original_url" value="https://github.com/kevthehermit/RATDecoders"/>
</Annotation>
<Annotation about="github.com/botherder/detekt/*" timestamp="0x000540096a55074f" href="Ch1naXRodWIuY29tL2JvdGhlcmRlci9kZXRla3QvKhDPjtTSloHQAg">
<Label name="_cse_turlh5vi4xc"/>
<AdditionalData attribute="original_url" value="https://github.com/botherder/detekt/"/>
</Annotation>
<Annotation about="www.iocbucket.com/*" timestamp="0x000540096960098d" href="ChN3d3cuaW9jYnVja2V0LmNvbS8qEI2TgMuWgdAC">
<Label name="_cse_turlh5vi4xc"/>
<AdditionalData attribute="original_url" value="https://www.iocbucket.com/"/>
</Annotation>
<Annotation about="github.com/fireeye/iocs*" timestamp="0x0005400968c5ee0e" href="ChhnaXRodWIuY29tL2ZpcmVleWUvaW9jcyoQjtyXxpaB0AI">
<Label name="_cse_turlh5vi4xc"/>
<AdditionalData attribute="original_url" value="https://github.com/fireeye/iocs"/>
</Annotation>
<Annotation about="github.com/Neo23x0/signature-base*" timestamp="0x00054009622299ea" href="CiJnaXRodWIuY29tL05lbzIzeDAvc2lnbmF0dXJlLWJhc2UqEOqzipGWgdAC">
<Label name="_cse_turlh5vi4xc"/>
<AdditionalData attribute="original_url" value="https://github.com/Neo23x0/signature-base"/>
</Annotation>
<Annotation about="www.arbornetworks.com/blog/*" timestamp="0x000540095c467b27" href="Chx3d3cuYXJib3JuZXR3b3Jrcy5jb20vYmxvZy8qEKf2meKVgdAC">
<Label name="_cse_turlh5vi4xc"/>
<AdditionalData attribute="original_url" value="https://www.arbornetworks.com/blog/"/>
</Annotation>
<Annotation about="www.infosecurity-magazine.com/*" timestamp="0x000540095ac71e9e" href="Ch93d3cuaW5mb3NlY3VyaXR5LW1hZ2F6aW5lLmNvbS8qEJ69nNaVgdAC">
<Label name="_cse_turlh5vi4xc"/>
<AdditionalData attribute="original_url" value="http://www.infosecurity-magazine.com/"/>
</Annotation>
<Annotation about="blogs.rsa.com/*" timestamp="0x00054009598dd1db" href="Cg9ibG9ncy5yc2EuY29tLyoQ26O3zJWB0AI">
<Label name="_cse_turlh5vi4xc"/>
<AdditionalData attribute="original_url" value="https://blogs.rsa.com"/>
</Annotation>
<Annotation about="*.krebsonsecurity.com/*" timestamp="0x0005400958e90e6d" href="ChcqLmtyZWJzb25zZWN1cml0eS5jb20vKhDtnKTHlYHQAg">
<Label name="_cse_turlh5vi4xc"/>
<AdditionalData attribute="original_url" value="http://krebsonsecurity.com"/>
</Annotation>
<Annotation about="*.cybercampaigns.net/*" timestamp="0x0005400956ebce89" href="ChYqLmN5YmVyY2FtcGFpZ25zLm5ldC8qEImdr7eVgdAC">
<Label name="_cse_turlh5vi4xc"/>
<AdditionalData attribute="original_url" value="http://cybercampaigns.net/"/>
</Annotation>
<Annotation about="*.threatpost.com/*" timestamp="0x0005400954fb66b2" href="ChIqLnRocmVhdHBvc3QuY29tLyoQss3tp5WB0AI">
<Label name="_cse_turlh5vi4xc"/>
<AdditionalData attribute="original_url" value="https://threatpost.com"/>
</Annotation>
<Annotation about="sandbox.deepviz.com/*" timestamp="0x00054009335e871b" href="ChVzYW5kYm94LmRlZXB2aXouY29tLyoQm476mpOB0AI">
<Label name="_cse_turlh5vi4xc"/>
<AdditionalData attribute="original_url" value="https://sandbox.deepviz.com/"/>
</Annotation>
<Annotation about="virusscan.jotti.org/*" timestamp="0x0005400932150346" href="ChV2aXJ1c3NjYW4uam90dGkub3JnLyoQxobUkJOB0AI">
<Label name="_cse_turlh5vi4xc"/>
<AdditionalData attribute="original_url" value="https://virusscan.jotti.org"/>
</Annotation>
<Annotation about="www.metadefender.com/*" timestamp="0x000540093193c7fe" href="ChZ3d3cubWV0YWRlZmVuZGVyLmNvbS8qEP6Pz4yTgdAC">
<Label name="_cse_turlh5vi4xc"/>
<AdditionalData attribute="original_url" value="https://www.metadefender.com"/>
</Annotation>
<Annotation about="*.virscan.org/*" timestamp="0x000540092a20b178" href="Cg8qLnZpcnNjYW4ub3JnLyoQ-OKC0ZKB0AI">
<Label name="_cse_turlh5vi4xc"/>
<AdditionalData attribute="original_url" value="http://virscan.org/"/>
</Annotation>
<Annotation about="www.passivetotal.org/*" timestamp="0x0005400920708ba3" href="ChZ3d3cucGFzc2l2ZXRvdGFsLm9yZy8qEKOXwoOSgdAC">
<Label name="_cse_turlh5vi4xc"/>
<AdditionalData attribute="original_url" value="https://www.passivetotal.org/"/>
</Annotation>
<Annotation about="www.file-analyzer.net/reports*" timestamp="0x000540091e7fc5d7" href="Ch53d3cuZmlsZS1hbmFseXplci5uZXQvcmVwb3J0cyoQ14v_85GB0AI">
<Label name="_cse_turlh5vi4xc"/>
<AdditionalData attribute="original_url" value="http://www.file-analyzer.net/reports"/>
</Annotation>
<Annotation about="www.threatexpert.com/*" timestamp="0x00054009174d691b" href="ChZ3d3cudGhyZWF0ZXhwZXJ0LmNvbS8qEJvStbqRgdAC">
<Label name="_cse_turlh5vi4xc"/>
<AdditionalData attribute="original_url" value="http://www.threatexpert.com/"/>
</Annotation>
<Annotation about="www.malwaredomainlist.com/*" timestamp="0x00054009160d1d96" href="Cht3d3cubWFsd2FyZWRvbWFpbmxpc3QuY29tLyoQlru0sJGB0AI">
<Label name="_cse_turlh5vi4xc"/>
<AdditionalData attribute="original_url" value="https://www.malwaredomainlist.com"/>
</Annotation>
<Annotation about="*.urlquery.net/*" timestamp="0x000540091532ffe9" href="ChAqLnVybHF1ZXJ5Lm5ldC8qEOn_y6mRgdAC">
<Label name="_cse_turlh5vi4xc"/>
<AdditionalData attribute="original_url" value="http://urlquery.net/"/>
</Annotation>
<Annotation about="www.threatminer.org/*" timestamp="0x000540090cd598b4" href="ChV3d3cudGhyZWF0bWluZXIub3JnLyoQtLHW5pCB0AI">
<Label name="_cse_turlh5vi4xc"/>
<AdditionalData attribute="original_url" value="https://www.threatminer.org/"/>
</Annotation>
<Annotation about="*.virusshare.com/*" timestamp="0x000540090b13f794" href="ChIqLnZpcnVzc2hhcmUuY29tLyoQlO_P2JCB0AI">
<Label name="_cse_turlh5vi4xc"/>
<AdditionalData attribute="original_url" value="https://virusshare.com/"/>
</Annotation>
<Annotation about="*.secuboxlabs.fr/*" timestamp="0x000540090a76de76" href="ChIqLnNlY3Vib3hsYWJzLmZyLyoQ9rzb05CB0AI">
<Label name="_cse_turlh5vi4xc"/>
<AdditionalData attribute="original_url" value="http://secuboxlabs.fr/"/>
</Annotation>
<Annotation about="malwaredb.malekal.com/*" timestamp="0x0005400909df8ff9" href="ChdtYWx3YXJlZGIubWFsZWthbC5jb20vKhD5n_7OkIHQAg">
<Label name="_cse_turlh5vi4xc"/>
<AdditionalData attribute="original_url" value="http://malwaredb.malekal.com/"/>
</Annotation>
<Annotation about="malc0de.com/database/*" timestamp="0x000540090932ac8a" href="ChZtYWxjMGRlLmNvbS9kYXRhYmFzZS8qEIrZysmQgdAC">
<Label name="_cse_turlh5vi4xc"/>
<AdditionalData attribute="original_url" value="http://malc0de.com/database/"/>
</Annotation>
<Annotation about="vxvault.net/ViriList.php" timestamp="0x0005400908469ecd" href="Chh2eHZhdWx0Lm5ldC9WaXJpTGlzdC5waHAQzb2awpCB0AI">
<Label name="_cse_turlh5vi4xc"/>
<AdditionalData attribute="original_url" value="http://vxvault.net/ViriList.php"/>
</Annotation>
<Annotation about="www.fox-it.com/en/insights/papers/*" timestamp="0x000540090784f6d5" href="CiN3d3cuZm94LWl0LmNvbS9lbi9pbnNpZ2h0cy9wYXBlcnMvKhDV7ZO8kIHQAg">
<Label name="_cse_turlh5vi4xc"/>
<AdditionalData attribute="original_url" value="https://www.fox-it.com/en/insights/papers/"/>
</Annotation>
<Annotation about="www.fox-it.com/en/insights/blogs/*" timestamp="0x0005400906baafb0" href="CiJ3d3cuZm94LWl0LmNvbS9lbi9pbnNpZ2h0cy9ibG9ncy8qELDf6rWQgdAC">
<Label name="_cse_turlh5vi4xc"/>
<AdditionalData attribute="original_url" value="https://www.fox-it.com/en/insights/blogs/"/>
</Annotation>
<Annotation about="*.virusshare.com/*" timestamp="0x0005400903ab7bb7" href="ChIqLnZpcnVzc2hhcmUuY29tLyoQt_etnZCB0AI">
<Label name="_cse_turlh5vi4xc"/>
<AdditionalData attribute="original_url" value="https://virusshare.com/"/>
</Annotation>
<Annotation about="www.malwareblacklist.com/showMDL.php" timestamp="0x0005400902719139" href="CiR3d3cubWFsd2FyZWJsYWNrbGlzdC5jb20vc2hvd01ETC5waHAQuaLGk5CB0AI">
<Label name="_cse_turlh5vi4xc"/>
<AdditionalData attribute="original_url" value="http://www.malwareblacklist.com/showMDL.php"/>
</Annotation>
<Annotation about="*.malwr.com/*" timestamp="0x0005400900053b48" href="Cg0qLm1hbHdyLmNvbS8qEMj2lICQgdAC">
<Label name="_cse_turlh5vi4xc"/>
<AdditionalData attribute="original_url" value="https://malwr.com/"/>
</Annotation>
<Annotation about="*.malware.lu/*" timestamp="0x00054008ff5941ed" href="Cg4qLm1hbHdhcmUubHUvKhDtg-X6j4HQAg">
<Label name="_cse_turlh5vi4xc"/>
<AdditionalData attribute="original_url" value="https://malware.lu/"/>
</Annotation>
<Annotation about="www.kernelmode.info/forum/*" timestamp="0x00054008fd969384" href="Cht3d3cua2VybmVsbW9kZS5pbmZvL2ZvcnVtLyoQhKfa7I-B0AI">
<Label name="_cse_turlh5vi4xc"/>
<AdditionalData attribute="original_url" value="http://www.kernelmode.info/forum/"/>
</Annotation>
<Annotation about="*.malshare.com/*" timestamp="0x00054008fc243208" href="ChAqLm1hbHNoYXJlLmNvbS8qEIjkkOGPgdAC">
<Label name="_cse_turlh5vi4xc"/>
<AdditionalData attribute="original_url" value="http://malshare.com/"/>
</Annotation>
<Annotation about="github.com/ytisf/theZoo*" timestamp="0x00054008fb5e487e" href="ChhnaXRodWIuY29tL3l0aXNmL3RoZVpvbyoQ_pD52o-B0AI">
<Label name="_cse_turlh5vi4xc"/>
<AdditionalData attribute="original_url" value="https://github.com/ytisf/theZoo"/>
</Annotation>
<Annotation about="*.dasmalwerk.eu/*" timestamp="0x00054008fa209e44" href="ChEqLmRhc21hbHdlcmsuZXUvKhDEvILRj4HQAg">
<Label name="_cse_turlh5vi4xc"/>
<AdditionalData attribute="original_url" value="http://dasmalwerk.eu/"/>
</Annotation>
<Annotation about="*.cymon.io/*" timestamp="0x00054008f67699ba" href="CgwqLmN5bW9uLmlvLyoQurPas4-B0AI">
<Label name="_cse_turlh5vi4xc"/>
<AdditionalData attribute="original_url" value="https://cymon.io/"/>
</Annotation>
<Annotation about="www.virustotal.com/*" timestamp="0x00054008f5809d1a" href="ChR3d3cudmlydXN0b3RhbC5jb20vKhCauoKsj4HQAg">
<Label name="_cse_turlh5vi4xc"/>
<AdditionalData attribute="original_url" value="https://www.virustotal.com/"/>
</Annotation>
<Annotation about="*.malwr.com/*" timestamp="0x00054008bb8c9528" href="Cg0qLm1hbHdyLmNvbS8qEKiqstyLgdAC">
<Label name="_cse_turlh5vi4xc"/>
<AdditionalData attribute="original_url" value="https://malwr.com/"/>
</Annotation>
<Annotation about="www.hybrid-analysis.com/*" timestamp="0x00054008ba7bb069" href="Chl3d3cuaHlicmlkLWFuYWx5c2lzLmNvbS8qEOng7tOLgdAC">
<Label name="_cse_turlh5vi4xc"/>
<AdditionalData attribute="original_url" value="https://www.hybrid-analysis.com/"/>
</Annotation>
<Annotation about="blog.checkpoint.com/*" timestamp="0x00053ffdf1c976ea" href="ChVibG9nLmNoZWNrcG9pbnQuY29tLyoQ6u2ljt__zwI">
<Label name="_cse_turlh5vi4xc"/>
<AdditionalData attribute="original_url" value="http://blog.checkpoint.com/"/>
</Annotation>
<Annotation about="blog.jpcert.or.jp/*" timestamp="0x00053ffdeef0c08e" href="ChNibG9nLmpwY2VydC5vci5qcC8qEI6Bw_fe_88C">
<Label name="_cse_turlh5vi4xc"/>
<AdditionalData attribute="original_url" value="http://blog.jpcert.or.jp/"/>
</Annotation>
<Annotation about="www.symantec.com/connect/blog/*" timestamp="0x00053ffde8e53959" href="Ch93d3cuc3ltYW50ZWMuY29tL2Nvbm5lY3QvYmxvZy8qENnylMfe_88C">
<Label name="_cse_turlh5vi4xc"/>
<AdditionalData attribute="original_url" value="https://www.symantec.com/connect/blog/"/>
</Annotation>
<Annotation about="www.nccgroup.trust/*" timestamp="0x00053ffde59c5017" href="ChR3d3cubmNjZ3JvdXAudHJ1c3QvKhCXoPGs3v_PAg">
<Label name="_cse_turlh5vi4xc"/>
<AdditionalData attribute="original_url" value="https://www.nccgroup.trust"/>
</Annotation>
<Annotation about="www.fireeye.com/blog/*" timestamp="0x00053ffddfde7feb" href="ChZ3d3cuZmlyZWV5ZS5jb20vYmxvZy8qEOv_-f7d_88C">
<Label name="_cse_turlh5vi4xc"/>
<AdditionalData attribute="original_url" value="https://www.fireeye.com/blog/"/>
</Annotation>
<Annotation about="blog.talosintel.com/*" timestamp="0x00053ffdde2cc9d4" href="ChVibG9nLnRhbG9zaW50ZWwuY29tLyoQ1JOz8d3_zwI">
<Label name="_cse_turlh5vi4xc"/>
<AdditionalData attribute="original_url" value="http://blog.talosintel.com/"/>
</Annotation>
<Annotation about="blogs.technet.microsoft.com/mmpc/*" timestamp="0x00053ffddabf8185" href="CiJibG9ncy50ZWNobmV0Lm1pY3Jvc29mdC5jb20vbW1wYy8qEIWD_tXd_88C">
<Label name="_cse_turlh5vi4xc"/>
<AdditionalData attribute="original_url" value="https://blogs.technet.microsoft.com/mmpc/"/>
</Annotation>
<Annotation about="blog.malwarebytes.com/*" timestamp="0x00053ffdd968f6d5" href="ChdibG9nLm1hbHdhcmVieXRlcy5jb20vKhDV7aPL3f_PAg">
<Label name="_cse_turlh5vi4xc"/>
<AdditionalData attribute="original_url" value="https://blog.malwarebytes.com/"/>
</Annotation>
<Annotation about="blog.gdatasoftware.com/*" timestamp="0x00053ffdd7508f08" href="ChhibG9nLmdkYXRhc29mdHdhcmUuY29tLyoQiJ7Cut3_zwI">
<Label name="_cse_turlh5vi4xc"/>
<AdditionalData attribute="original_url" value="https://blog.gdatasoftware.com/"/>
</Annotation>
<Annotation about="pwc.blogs.com/cyber_security_updates/*" timestamp="0x00053ffdd6677b4f" href="CiZwd2MuYmxvZ3MuY29tL2N5YmVyX3NlY3VyaXR5X3VwZGF0ZXMvKhDP9p2z3f_PAg">
<Label name="_cse_turlh5vi4xc"/>
<AdditionalData attribute="original_url" value="http://pwc.blogs.com/cyber_security_updates/"/>
</Annotation>
<Annotation about="www.blueliv.com/blog-news/*" timestamp="0x00053ffdd5cfe537" href="Cht3d3cuYmx1ZWxpdi5jb20vYmxvZy1uZXdzLyoQt8q_rt3_zwI">
<Label name="_cse_turlh5vi4xc"/>
<AdditionalData attribute="original_url" value="https://www.blueliv.com/blog-news/"/>
</Annotation>
<Annotation about="www.cert.pl/en/*" timestamp="0x00053ffdd4599b50" href="ChB3d3cuY2VydC5wbC9lbi8qENC25qLd_88C">
<Label name="_cse_turlh5vi4xc"/>
<AdditionalData attribute="original_url" value="https://www.cert.pl/en/"/>
</Annotation>
<Annotation about="github.com/eset/malware-ioc*" timestamp="0x00053ffdc7fb2718" href="ChxnaXRodWIuY29tL2VzZXQvbWFsd2FyZS1pb2MqEJjO7L_c_88C">
<Label name="_cse_turlh5vi4xc"/>
<AdditionalData attribute="original_url" value="https://github.com/eset/malware-ioc"/>
</Annotation>
<Annotation about="www.arbornetworks.com/blog/asert*" timestamp="0x00053ffdc6bf2202" href="CiF3d3cuYXJib3JuZXR3b3Jrcy5jb20vYmxvZy9hc2VydCoQgsT8tdz_zwI">
<Label name="_cse_turlh5vi4xc"/>
<AdditionalData attribute="original_url" value="https://www.arbornetworks.com/blog/asert"/>
</Annotation>
<Annotation about="blog.airbuscybersecurity.com/*" timestamp="0x00053ffdc5901e74" href="Ch5ibG9nLmFpcmJ1c2N5YmVyc2VjdXJpdHkuY29tLyoQ9LzArNz_zwI">
<Label name="_cse_turlh5vi4xc"/>
<AdditionalData attribute="original_url" value="http://blog.airbuscybersecurity.com/"/>
</Annotation>
<Annotation about="otx.alienvault.com/pulse/*" timestamp="0x00053ffdc39b8b6e" href="ChpvdHguYWxpZW52YXVsdC5jb20vcHVsc2UvKhDulu6c3P_PAg">
<Label name="_cse_turlh5vi4xc"/>
<AdditionalData attribute="original_url" value="https://otx.alienvault.com/pulse/"/>
</Annotation>
<Annotation about="docs.google.com/spreadsheets/d/1H9_xaxQHpWaa4O_Son4Gx0YOIzlcBWMsdvePFX68EKU/*" timestamp="0x00053ffd8eae180f" href="Ck1kb2NzLmdvb2dsZS5jb20vc3ByZWFkc2hlZXRzL2QvMUg5X3hheFFIcFdhYTRPX1NvbjRHeDBZT0l6bGNCV01zZHZlUEZYNjhFS1UvKhCPsLj12P_PAg">
<Label name="_cse_turlh5vi4xc"/>
<AdditionalData attribute="original_url" value="https://docs.google.com/spreadsheets/d/1H9_xaxQHpWaa4O_Son4Gx0YOIzlcBWMsdvePFX68EKU/"/>
</Annotation>
<Annotation about="*.cybercampaigns.net/*" score="1" timestamp="0x00053ffd0da10ac8" href="ChYqLmN5YmVyY2FtcGFpZ25zLm5ldC8qEMiVhO3Q_88C">
<Label name="_cse_turlh5vi4xc"/>
<AdditionalData attribute="original_url" value="http://cybercampaigns.net/"/>
</Annotation>
<Annotation about="www.symantec.com/connect/blogs/*" score="1" timestamp="0x00053ffd0da10aba" href="CiB3d3cuc3ltYW50ZWMuY29tL2Nvbm5lY3QvYmxvZ3MvKhC6lYTt0P_PAg">
<Label name="_cse_turlh5vi4xc"/>
<AdditionalData attribute="original_url" value="http://www.symantec.com/connect/blogs/"/>
</Annotation>
<Annotation about="www.kaspersky.com/about/news/virus/*" score="1" timestamp="0x00053ffd0da10aad" href="CiR3d3cua2FzcGVyc2t5LmNvbS9hYm91dC9uZXdzL3ZpcnVzLyoQrZWE7dD_zwI">
<Label name="_cse_turlh5vi4xc"/>
<AdditionalData attribute="original_url" value="http://www.kaspersky.com/about/news/virus/"/>
</Annotation>
<Annotation about="www.bluecoat.com/security-blog/*" score="1" timestamp="0x00053ffd0da10a9f" href="CiB3d3cuYmx1ZWNvYXQuY29tL3NlY3VyaXR5LWJsb2cvKhCflYTt0P_PAg">
<Label name="_cse_turlh5vi4xc"/>
<AdditionalData attribute="original_url" value="https://www.bluecoat.com/security-blog/"/>
</Annotation>
<Annotation about="www.proofpoint.com/*" score="1" timestamp="0x00053ffd0da10a92" href="ChR3d3cucHJvb2Zwb2ludC5jb20vKhCSlYTt0P_PAg">
<Label name="_cse_turlh5vi4xc"/>
<AdditionalData attribute="original_url" value="https://www.proofpoint.com"/>
</Annotation>
<Annotation about="blogs.technet.microsoft.com/mmpc/*" score="1" timestamp="0x00053ffd0da10a84" href="CiJibG9ncy50ZWNobmV0Lm1pY3Jvc29mdC5jb20vbW1wYy8qEISVhO3Q_88C">
<Label name="_cse_turlh5vi4xc"/>
<AdditionalData attribute="original_url" value="https://blogs.technet.microsoft.com/mmpc/"/>
</Annotation>
<Annotation about="www.cymmetria.com/*" score="1" timestamp="0x00053ffd0da10a76" href="ChN3d3cuY3ltbWV0cmlhLmNvbS8qEPaUhO3Q_88C">
<Label name="_cse_turlh5vi4xc"/>
<AdditionalData attribute="original_url" value="https://www.cymmetria.com"/>
</Annotation>
<Annotation about="blogs.forcepoint.com/*" score="1" timestamp="0x00053ffd0da10a67" href="ChZibG9ncy5mb3JjZXBvaW50LmNvbS8qEOeUhO3Q_88C">
<Label name="_cse_turlh5vi4xc"/>
<AdditionalData attribute="original_url" value="https://blogs.forcepoint.com"/>
</Annotation>
<Annotation about="*.normanshark.com/*" score="1" timestamp="0x00053ffd0da10a58" href="ChMqLm5vcm1hbnNoYXJrLmNvbS8qENiUhO3Q_88C">
<Label name="_cse_turlh5vi4xc"/>
<AdditionalData attribute="original_url" value="http://normanshark.com"/>
</Annotation>
<Annotation about="blog.gdatasoftware.com/blog*" score="1" timestamp="0x00053ffd0da10a49" href="ChxibG9nLmdkYXRhc29mdHdhcmUuY29tL2Jsb2cqEMmUhO3Q_88C">
<Label name="_cse_turlh5vi4xc"/>
<AdditionalData attribute="original_url" value="https://blog.gdatasoftware.com/blog"/>
</Annotation>
<Annotation about="www.cyphort.com/*" score="1" timestamp="0x00053ffd0da10a3d" href="ChF3d3cuY3lwaG9ydC5jb20vKhC9lITt0P_PAg">
<Label name="_cse_turlh5vi4xc"/>
<AdditionalData attribute="original_url" value="http://www.cyphort.com"/>
</Annotation>
<Annotation about="www.rsaconference.com/*" score="1" timestamp="0x00053ffd0da10a30" href="Chd3d3cucnNhY29uZmVyZW5jZS5jb20vKhCwlITt0P_PAg">
<Label name="_cse_turlh5vi4xc"/>
<AdditionalData attribute="original_url" value="https://www.rsaconference.com"/>
</Annotation>
<Annotation about="www.trendmicro.com/*" score="1" timestamp="0x00053ffd0da10a23" href="ChR3d3cudHJlbmRtaWNyby5jb20vKhCjlITt0P_PAg">
<Label name="_cse_turlh5vi4xc"/>
<AdditionalData attribute="original_url" value="http://www.trendmicro.com"/>
</Annotation>
<Annotation about="*.securityaffairs.co/*" score="1" timestamp="0x00053ffd0da10a14" href="ChYqLnNlY3VyaXR5YWZmYWlycy5jby8qEJSUhO3Q_88C">
<Label name="_cse_turlh5vi4xc"/>
<AdditionalData attribute="original_url" value="http://securityaffairs.co"/>
</Annotation>
<Annotation about="www.langner.com/*" score="1" timestamp="0x00053ffd0da10a08" href="ChF3d3cubGFuZ25lci5jb20vKhCIlITt0P_PAg">
<Label name="_cse_turlh5vi4xc"/>
<AdditionalData attribute="original_url" value="http://www.langner.com"/>
</Annotation>
<Annotation about="archive.org/details/Stuxnet*" score="1" timestamp="0x00053ffd0da109fa" href="ChxhcmNoaXZlLm9yZy9kZXRhaWxzL1N0dXhuZXQqEPqThO3Q_88C">
<Label name="_cse_turlh5vi4xc"/>
<AdditionalData attribute="original_url" value="https://archive.org/details/Stuxnet"/>
</Annotation>
<Annotation about="securityfactory.tistory.com/*" score="1" timestamp="0x00053ffd0da109ea" href="Ch1zZWN1cml0eWZhY3RvcnkudGlzdG9yeS5jb20vKhDqk4Tt0P_PAg">
<Label name="_cse_turlh5vi4xc"/>
<AdditionalData attribute="original_url" value="http://securityfactory.tistory.com"/>
</Annotation>
<Annotation about="www.operationblockbuster.com/*" score="1" timestamp="0x00053ffd0da109dc" href="Ch53d3cub3BlcmF0aW9uYmxvY2tidXN0ZXIuY29tLyoQ3JOE7dD_zwI">
<Label name="_cse_turlh5vi4xc"/>
<AdditionalData attribute="original_url" value="https://www.operationblockbuster.com"/>
</Annotation>
<Annotation about="iranthreats.github.io/*" score="1" timestamp="0x00053ffd0da109cc" href="ChdpcmFudGhyZWF0cy5naXRodWIuaW8vKhDMk4Tt0P_PAg">
<Label name="_cse_turlh5vi4xc"/>
<AdditionalData attribute="original_url" value="https://iranthreats.github.io/"/>
</Annotation>
<Annotation about="ddanchev.blogspot.com.es/*" score="1" timestamp="0x00053ffd0da109bb" href="ChpkZGFuY2hldi5ibG9nc3BvdC5jb20uZXMvKhC7k4Tt0P_PAg">
<Label name="_cse_turlh5vi4xc"/>
<AdditionalData attribute="original_url" value="http://ddanchev.blogspot.com.es"/>
</Annotation>
<Annotation about="www.secureworks.com/cyber-threat-intelligence/*" score="1" timestamp="0x00053ffd0da109a4" href="Ci93d3cuc2VjdXJld29ya3MuY29tL2N5YmVyLXRocmVhdC1pbnRlbGxpZ2VuY2UvKhCkk4Tt0P_PAg">
<Label name="_cse_turlh5vi4xc"/>
<AdditionalData attribute="original_url" value="http://www.secureworks.com/cyber-threat-intelligence/"/>
</Annotation>
<Annotation about="blog.checkpoint.com/*" score="1" timestamp="0x00053ffd0da10995" href="ChVibG9nLmNoZWNrcG9pbnQuY29tLyoQlZOE7dD_zwI">
<Label name="_cse_turlh5vi4xc"/>
<AdditionalData attribute="original_url" value="https://blog.checkpoint.com"/>
</Annotation>
<Annotation about="www.clearskysec.com/*" score="1" timestamp="0x00053ffd0da10988" href="ChV3d3cuY2xlYXJza3lzZWMuY29tLyoQiJOE7dD_zwI">
<Label name="_cse_turlh5vi4xc"/>
<AdditionalData attribute="original_url" value="http://www.clearskysec.com"/>
</Annotation>
<Annotation about="www.nccgroup.trust/*" score="1" timestamp="0x00053ffd0da10979" href="ChR3d3cubmNjZ3JvdXAudHJ1c3QvKhD5koTt0P_PAg">
<Label name="_cse_turlh5vi4xc"/>
<AdditionalData attribute="original_url" value="https://www.nccgroup.trust"/>
</Annotation>
<Annotation about="www.threatconnect.com/blog/*" score="1" timestamp="0x00053ffd0da1096a" href="Chx3d3cudGhyZWF0Y29ubmVjdC5jb20vYmxvZy8qEOqShO3Q_88C">
<Label name="_cse_turlh5vi4xc"/>
<AdditionalData attribute="original_url" value="https://www.threatconnect.com/blog/"/>
</Annotation>
<Annotation about="www.govcert.admin.ch/blog/*" score="1" timestamp="0x00053ffd0da10957" href="Cht3d3cuZ292Y2VydC5hZG1pbi5jaC9ibG9nLyoQ15KE7dD_zwI">
<Label name="_cse_turlh5vi4xc"/>
<AdditionalData attribute="original_url" value="https://www.govcert.admin.ch/blog/"/>
</Annotation>
<Annotation about="www.group-ib.com/*" score="1" timestamp="0x00053ffd0da1094c" href="ChJ3d3cuZ3JvdXAtaWIuY29tLyoQzJKE7dD_zwI">
<Label name="_cse_turlh5vi4xc"/>
<AdditionalData attribute="original_url" value="http://www.group-ib.com"/>
</Annotation>
<Annotation about="www.welivesecurity.com/*" score="1" timestamp="0x00053ffd0da1093f" href="Chh3d3cud2VsaXZlc2VjdXJpdHkuY29tLyoQv5KE7dD_zwI">
<Label name="_cse_turlh5vi4xc"/>
<AdditionalData attribute="original_url" value="http://www.welivesecurity.com"/>
</Annotation>
<Annotation about="www.netresec.com/*" score="1" timestamp="0x00053ffd0da10933" href="ChJ3d3cubmV0cmVzZWMuY29tLyoQs5KE7dD_zwI">
<Label name="_cse_turlh5vi4xc"/>
<AdditionalData attribute="original_url" value="http://www.netresec.com"/>
</Annotation>
<Annotation about="www2.fireeye.com/*" score="1" timestamp="0x00053ffd0da10926" href="ChJ3d3cyLmZpcmVleWUuY29tLyoQppKE7dD_zwI">
<Label name="_cse_turlh5vi4xc"/>
<AdditionalData attribute="original_url" value="https://www2.fireeye.com"/>
</Annotation>
<Annotation about="labsblog.f-secure.com/*" score="1" timestamp="0x00053ffd0da10913" href="ChdsYWJzYmxvZy5mLXNlY3VyZS5jb20vKhCTkoTt0P_PAg">
<Label name="_cse_turlh5vi4xc"/>
<AdditionalData attribute="original_url" value="https://labsblog.f-secure.com/"/>
</Annotation>
<Annotation about="blog.cylance.com/*" score="1" timestamp="0x00053ffd0da108fd" href="ChJibG9nLmN5bGFuY2UuY29tLyoQ_ZGE7dD_zwI">
<Label name="_cse_turlh5vi4xc"/>
<AdditionalData attribute="original_url" value="https://blog.cylance.com"/>
</Annotation>
<Annotation about="blog.fox-it.com/*" score="1" timestamp="0x00053ffd0da108ed" href="ChFibG9nLmZveC1pdC5jb20vKhDtkYTt0P_PAg">
<Label name="_cse_turlh5vi4xc"/>
<AdditionalData attribute="original_url" value="https://blog.fox-it.com/"/>
</Annotation>
<Annotation about="www.cylance.com/*" score="1" timestamp="0x00053ffd0da108e1" href="ChF3d3cuY3lsYW5jZS5jb20vKhDhkYTt0P_PAg">
<Label name="_cse_turlh5vi4xc"/>
<AdditionalData attribute="original_url" value="https://www.cylance.com"/>
</Annotation>
<Annotation about="go.crowdstrike.com/*" score="1" timestamp="0x00053ffd0da108d2" href="ChRnby5jcm93ZHN0cmlrZS5jb20vKhDSkYTt0P_PAg">
<Label name="_cse_turlh5vi4xc"/>
<AdditionalData attribute="original_url" value="http://go.crowdstrike.com/"/>
</Annotation>
<Annotation about="www.darkreading.com/attacks-and-breaches/*" score="1" timestamp="0x00053ffd0da108c3" href="Cip3d3cuZGFya3JlYWRpbmcuY29tL2F0dGFja3MtYW5kLWJyZWFjaGVzLyoQw5GE7dD_zwI">
<Label name="_cse_turlh5vi4xc"/>
<AdditionalData attribute="original_url" value="http://www.darkreading.com/attacks-and-breaches/"/>
</Annotation>
<Annotation about="www.proofpoint.com/*" score="1" timestamp="0x00053ffd0da108b4" href="ChR3d3cucHJvb2Zwb2ludC5jb20vKhC0kYTt0P_PAg">
<Label name="_cse_turlh5vi4xc"/>
<AdditionalData attribute="original_url" value="https://www.proofpoint.com/"/>
</Annotation>
<Annotation about="www.alienvault.com/open-threat-exchange/blog/*" score="1" timestamp="0x00053ffd0da108a6" href="Ci53d3cuYWxpZW52YXVsdC5jb20vb3Blbi10aHJlYXQtZXhjaGFuZ2UvYmxvZy8qEKaRhO3Q_88C">
<Label name="_cse_turlh5vi4xc"/>
<AdditionalData attribute="original_url" value="https://www.alienvault.com/open-threat-exchange/blog/"/>
</Annotation>
<Annotation about="blog.airbuscybersecurity.com/*" score="1" timestamp="0x00053ffd0da10895" href="Ch5ibG9nLmFpcmJ1c2N5YmVyc2VjdXJpdHkuY29tLyoQlZGE7dD_zwI">
<Label name="_cse_turlh5vi4xc"/>
<AdditionalData attribute="original_url" value="http://blog.airbuscybersecurity.com"/>
</Annotation>
<Annotation about="files.sans.org/*" score="1" timestamp="0x00053ffd0da10886" href="ChBmaWxlcy5zYW5zLm9yZy8qEIaRhO3Q_88C">
<Label name="_cse_turlh5vi4xc"/>
<AdditionalData attribute="original_url" value="http://files.sans.org"/>
</Annotation>
<Annotation about="pwc.blogs.com/*" score="1" timestamp="0x00053ffd0da10878" href="Cg9wd2MuYmxvZ3MuY29tLyoQ-JCE7dD_zwI">
<Label name="_cse_turlh5vi4xc"/>
<AdditionalData attribute="original_url" value="http://pwc.blogs.com"/>
</Annotation>
<Annotation about="*.citizenlab.org/*" score="1" timestamp="0x00053ffd0da10869" href="ChIqLmNpdGl6ZW5sYWIub3JnLyoQ6ZCE7dD_zwI">
<Label name="_cse_turlh5vi4xc"/>
<AdditionalData attribute="original_url" value="https://citizenlab.org"/>
</Annotation>
<Annotation about="www.arbornetworks.com/blog/*" score="1" timestamp="0x00053ffd0da1085a" href="Chx3d3cuYXJib3JuZXR3b3Jrcy5jb20vYmxvZy8qENqQhO3Q_88C">
<Label name="_cse_turlh5vi4xc"/>
<AdditionalData attribute="original_url" value="https://www.arbornetworks.com/blog/"/>
</Annotation>
<Annotation about="otx.alienvault.com/*" score="1" timestamp="0x00053ffd0da10848" href="ChRvdHguYWxpZW52YXVsdC5jb20vKhDIkITt0P_PAg">
<Label name="_cse_turlh5vi4xc"/>
<AdditionalData attribute="original_url" value="https://otx.alienvault.com/"/>
</Annotation>
<Annotation about="*.lookingglasscyber.com/*" score="1" timestamp="0x00053ffd0da10836" href="ChkqLmxvb2tpbmdnbGFzc2N5YmVyLmNvbS8qELaQhO3Q_88C">
<Label name="_cse_turlh5vi4xc"/>
<AdditionalData attribute="original_url" value="https://lookingglasscyber.com"/>
</Annotation>
<Annotation about="www.zscaler.com/*" score="1" timestamp="0x00053ffd0da10829" href="ChF3d3cuenNjYWxlci5jb20vKhCpkITt0P_PAg">
<Label name="_cse_turlh5vi4xc"/>
<AdditionalData attribute="original_url" value="https://www.zscaler.com"/>
</Annotation>
<Annotation about="researchcenter.paloaltonetworks.com/*" score="1" timestamp="0x00053ffd0da10817" href="CiVyZXNlYXJjaGNlbnRlci5wYWxvYWx0b25ldHdvcmtzLmNvbS8qEJeQhO3Q_88C">
<Label name="_cse_turlh5vi4xc"/>
<AdditionalData attribute="original_url" value="http://researchcenter.paloaltonetworks.com"/>
</Annotation>
<Annotation about="blog.trendmicro.com/trendlabs-security-intelligence/*" score="1" timestamp="0x00053ffd0da10807" href="CjVibG9nLnRyZW5kbWljcm8uY29tL3RyZW5kbGFicy1zZWN1cml0eS1pbnRlbGxpZ2VuY2UvKhCHkITt0P_PAg">
<Label name="_cse_turlh5vi4xc"/>
<AdditionalData attribute="original_url" value="http://blog.trendmicro.com/trendlabs-security-intelligence/"/>
</Annotation>
<Annotation about="www.isightpartners.com/*" score="1" timestamp="0x00053ffd0da107f7" href="Chh3d3cuaXNpZ2h0cGFydG5lcnMuY29tLyoQ94-E7dD_zwI">
<Label name="_cse_turlh5vi4xc"/>
<AdditionalData attribute="original_url" value="https://www.isightpartners.com"/>
</Annotation>
<Annotation about="www.novetta.com/*" score="1" timestamp="0x00053ffd0da107e9" href="ChF3d3cubm92ZXR0YS5jb20vKhDpj4Tt0P_PAg">
<Label name="_cse_turlh5vi4xc"/>
<AdditionalData attribute="original_url" value="http://www.novetta.com"/>
</Annotation>
<Annotation about="*.threatpost.com/*" score="1" timestamp="0x00053ffd0da107d2" href="ChIqLnRocmVhdHBvc3QuY29tLyoQ0o-E7dD_zwI">
<Label name="_cse_turlh5vi4xc"/>
<AdditionalData attribute="original_url" value="https://threatpost.com"/>
</Annotation>
<Annotation about="*.securelist.com/*" score="1" timestamp="0x00053ffd0da107c1" href="ChIqLnNlY3VyZWxpc3QuY29tLyoQwY-E7dD_zwI">
<Label name="_cse_turlh5vi4xc"/>
<AdditionalData attribute="original_url" value="https://securelist.com"/>
</Annotation>
<Annotation about="www.crowdstrike.com/blog/*" score="1" timestamp="0x00053ffd0da107ad" href="Chp3d3cuY3Jvd2RzdHJpa2UuY29tL2Jsb2cvKhCtj4Tt0P_PAg">
<Label name="_cse_turlh5vi4xc"/>
<AdditionalData attribute="original_url" value="http://www.crowdstrike.com/blog/"/>
</Annotation>
<Annotation about="www.fireeye.com/blog/*" score="1" timestamp="0x00053ffd0da1079f" href="ChZ3d3cuZmlyZWV5ZS5jb20vYmxvZy8qEJ-PhO3Q_88C">
<Label name="_cse_turlh5vi4xc"/>
<AdditionalData attribute="original_url" value="https://www.fireeye.com/blog/"/>
</Annotation>
<Annotation about="aptnotes.malwareconfig.com/*" score="1" timestamp="0x00053ffd0da1078b" href="ChxhcHRub3Rlcy5tYWx3YXJlY29uZmlnLmNvbS8qEIuPhO3Q_88C">
<Label name="_cse_turlh5vi4xc"/>
<AdditionalData attribute="original_url" value="https://aptnotes.malwareconfig.com/"/>
</Annotation>
<Annotation about="github.com/kbandla/APTnotes*" score="1" timestamp="0x00053ffd0da10777" href="ChxnaXRodWIuY29tL2tiYW5kbGEvQVBUbm90ZXMqEPeOhO3Q_88C">
<Label name="_cse_turlh5vi4xc"/>
<AdditionalData attribute="original_url" value="https://github.com/kbandla/APTnotes"/>
</Annotation>
<Annotation about="docs.google.com/spreadsheets/d/1H9_xaxQHpWaa4O_Son4Gx0YOIzlcBWMsdvePFX68EKU/pubhtml*" score="1" timestamp="0x00053ffd0da10753" href="ClRkb2NzLmdvb2dsZS5jb20vc3ByZWFkc2hlZXRzL2QvMUg5X3hheFFIcFdhYTRPX1NvbjRHeDBZT0l6bGNCV01zZHZlUEZYNjhFS1UvcHViaHRtbCoQ046E7dD_zwI">
<Label name="_cse_turlh5vi4xc"/>
<AdditionalData attribute="original_url" value="https://docs.google.com/spreadsheets/d/1H9_xaxQHpWaa4O_Son4Gx0YOIzlcBWMsdvePFX68EKU/pubhtml"/>
</Annotation>
</Annotations>
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment