GV

GeezerVison

The World Wide Web, restored to 800 pixels of glory.

Home|About|Gaming cabinet|Archives|How it works|Starter sites

On this site

  • Sign in
  • ActionsCI/CD and automation
  • CodespacesCloud development environments
  • All Features
  • Documentation
  • Training
  • Certifications
  • Build with Copilot
  • Customize Copilot
  • Integrations
  • Trending repos
  • GitHub Sponsors
  • Developer articles
  • Enterprises

This view

  • Original page
  • New address

GeezerVison is showing github.com — mthcht - Overview
@mthcht mthcht Follow
More
  • Overview
  • Repositories
  • Projects
  • Packages
  • Stars
  • Sponsoring
@mthcht
mthcht
Follow
View mthcht's full-sized avatar
🏠
Working from home

mthcht

🏠
Working from home
Follow
Sponsor
Threat Hunting - DFIR - Detection Engineering
664 followers · 276 following
  • https://medium.com/@mthcht
  • @mthcht2
  • @mthcht.bsky.social

Achievements

Achievement: QuickdrawAchievement: Public SponsorAchievement: Starstruckx3Achievement: Pull Shark

Achievements

Achievement: QuickdrawAchievement: Public SponsorAchievement: Starstruckx3Achievement: Pull Shark

Highlights

  • Pro

Organizations

@s1community @lolc2 @BADGUIDS @sinkholed @lolexfil @lolfsaas @ExtSentry @tor-archive @vsxsentry @Nehboro @quicknotes @OAuthSentry @RemoteSlop @dcoyn @ScryerNet
More
  • Overview
  • Repositories
  • Projects
  • Packages
  • Stars
  • Sponsoring
mthcht/README.md

Hi there 👋

My Projects

  • 📜 My Detection Lists for SOC/DFIR
  • 🧪 PurpleTeam scripts and notes
  • 👁️ LOLC2
  • 💦 LOLEXFIL
  • ☁️ LOLfSaas
  • 🆔 BADGUIDs
  • 💠 VSXSentry
    • 💠 VSXSentry-Guard
  • 🧩 EXTSentry
    • 🧩ExtSentry-Guard
  • 🔐 OAuthSentry
  • 🐼 Nehboro
    • 🧩 nehboro
  • 🧅 TOR archive
  • 🕳️ SINKHOLED
  • 📖 Threat Intelligence Reports Database
  • 🐾 Threat Hunting artifacts
    • 🛠️ Threat Hunting yara rules
  • 🛡️ Browser Extensions
    • 🧩 TraceGlyph
    • 🧩 Masquerade-Spoofer
    • 🧩 ExtSentry-Guard
    • 🧩 threatcheck
    • 🧩 nehboro
    • 🧩 quick-notes
    • 🧩 chromapicker
    • 🧩 Hakr
    • 🧩 TabZEN
    • 🧩 Github Web IDE
    • 🧩 AuthForge

🧠 Blog Posts

Details
  • Threat Hunting - Suspicious Named pipes
  • Event Log Manipulations - Time slipping
  • Threat Hunting - Suspicious Service names
  • Threat Hunting - Suspicious User-agents
  • Detecting DNS over HTTPS
  • Threat Hunting - Suspicious TLDs
  • OSINT - Catching my hacker via leaked datases
  • Detecting DLL Hijacking techniques from HijackLibs With Splunk
  • How Threat Actors use Pastebin
  • Detecting Phishing attempts with DNSTWIST
  • File Integrity monitoring with Auditd
  • How Threat Actors use Github
  • Detecting Browser extensions installations
  • C2 Hiding in plain sight
  • Detecting PSEXEC and similar tools
  • Detecting Phishing attempts with Wetransfer
  • Detecting HTML smuggling Phishing attempts
  • More content on Medium and Twitter/BlueSky

Pinned Loading

  1. awesome-lists awesome-lists Public

    Awesome Security lists for SOC/CERT/CTI

    YARA 2k 260

  2. ThreatHunting-Keywords ThreatHunting-Keywords Public

    Awesome list of keywords and artifacts for Threat Hunting sessions

    PowerShell 683 79

  3. ThreatIntel-Reports ThreatIntel-Reports Public

    Raw data from Threat Intelligence Reports with automatic reports collection and keyword search across thousands of reports

    Python 178 26

  4. lolc2/lolc2.github.io lolc2/lolc2.github.io Public

    lolC2 is a collection of C2 frameworks that leverage legitimate services to evade detection

    HTML 348 29

  5. ExtSentry/ExtSentry.github.io ExtSentry/ExtSentry.github.io Public

    Browser Extension Threat Intelligence feed - extsentry.github.io

    HTML 41 2

  6. vsxsentry/vsxsentry.github.io vsxsentry/vsxsentry.github.io Public

    VSX Extension Threat Intelligence

    HTML 13

Something went wrong, please refresh the page to try again.
If the problem persists, check the GitHub status page or contact support.

Uh oh!

There was an error while loading. Please reload this page.
You are visitor 01402503 — GeezerVison does not store the pages you look up.
Best viewed with Netscape Navigator 4.7 or Internet Explorer 6 at 800×600. No cookies required.