From 65b5673014481e28ebb06491e57821a27448634e Mon Sep 17 00:00:00 2001 From: Joseph Goydish II Date: Wed, 10 Dec 2025 18:16:20 -0500 Subject: [PATCH] Update README.md --- README.md | 7 +++++++ 1 file changed, 7 insertions(+) diff --git a/README.md b/README.md index 6dfb028..ee6c63e 100644 --- a/README.md +++ b/README.md @@ -1,5 +1,8 @@ # ShadowShells | Observed Indicators (Confirmed Malicious) +> Known tools leave familiar footprints, but when they surface inside a live C2 mesh, +> the echoes change shape — and the signal becomes intelligence. + ## Purpose This package contains **sanitized traces and echoes** of observed entities | domains, UUIDs, processes, and signature strings | directly linked to confirmed command-and-control activity. @@ -11,5 +14,9 @@ All data here is **metadata only**. No raw logs, PCAPs, or sensitive artifacts a - Consult `key_hits.txt` to track behaviors or patterns: shell anomalies, proxy/tunnel strings, beacon pulses. + + + + ## License **Defensive use only. Provided as-is. No warranty.**