mandiant/red_team_tool_countermeasures resource

Health v2 · maintenance only

Flags: no_releases archived

Adoption not part of the score

2665 stars · 825 forks observed · 2026-08-28

What it is AI-extracted, prompt v1, taxonomy v1, 2026-08-30, confidence not recorded

A repository of detection rules (Snort, YARA, ClamAV, HXIOC) released by Mandiant/FireEye for countering red team tools and threats. Rules are split into production and supplemental categories depending on tuning requirements.

Use cases

• detect red team tooling in my network
• yara rules for malware hunting
• snort signatures for threat detection
• ioc-based threat hunting rules
• clamav signatures for known attacker tools

When to choose

• you need community-vetted detection signatures for red team tools
• you run Snort, YARA, or ClamAV and want ready-made rules
• you want hunting rules to supplement your threat detection

When to avoid

• you need guaranteed zero false positives without tuning
• you require vendor support or SLAs
• you need automated deployment rather than raw rule files

Facets

dataset · maturity maintenance

security vulnerability-scanning security penetration-testing windows cross-platform yara-rules snort-rules clamav-signatures threat-detection red-team ioc hunting linux macos

Member repositories

For agents

markdown · JSON · MCP: product_card(name="mandiant/red_team_tool_countermeasures")