Welcome to the BitLyft SOC Team's IOC Repository. This repository is a collection of Indicators of Compromise (IOCs) that our SOC team has identified, validated, and is sharing with the community to help improve threat intelligence and proactive security measures.
BitLyft's Security Operations Center (SOC) continuously monitors and analyzes threat intelligence feeds, security events, and attack patterns. The IOCs provided here are derived from:
- Active Investigations - Real-world incidents analyzed by our SOC analysts.
- Threat Intelligence Feeds - Aggregated from multiple trusted sources.
- Customer Reports - Anonymized and verified indicators from our security monitoring.
- Malware Analysis - Extracted from sandbox analysis and reverse engineering efforts.
These indicators can help security teams, researchers, and organizations detect, mitigate, and respond to cyber threats more effectively.
This repository is structured as follows:
├── domains/ # Malicious domains (TXT/CSV format)
├── ip-addresses/ # Malicious IP addresses (TXT/CSV format)
├── hashes/ # File hashes (MD5, SHA1, SHA256)
├── urls/ # Malicious URLs
└── README.md # This document
Security teams can integrate these IOCs into their threat detection systems, including:
- SIEM platforms (e.g., Graylog, Splunk, ELK)
- Firewall and IDS/IPS rules
- Endpoint Detection and Response (EDR) solutions
- Threat Intelligence Platforms (TIPs)
- Custom security scripts and automation
These IOCs are provided "as-is" for informational purposes only. BitLyft does not guarantee the accuracy, completeness, or real-time relevance of these indicators. Users are responsible for validating and applying them in accordance with their organization's security policies and compliance requirements.
- Website: https://www.bitlyft.com
🚀 Stay secure. Stay informed.