Biblioteca de referência

Cheatsheet de Triagem Forense

IOC, hash, header de e-mail, defang, Safe Links e timeline de logs.

Defanged URL

Referência: Safer sharing shape for suspicious URLs.

hxxps://example[.]com/path

Referência: Documentation-range IP example for IOC extraction.

203.0.113.10

Referência: Common hash identifier hint.

32 hex characters

Referência: Email path header shape.

Received: from host by mx;