0xThiebaut / Signatures
🚧 Currently transfering TLP:CLEAR rules from TLP:AMBER repository...
☆22Updated 8 months ago
Related projects ⓘ
Alternatives and complementary repositories for Signatures
- Emulates the VirusTotal "vt" YARA module for livehunt rule debugging/testing☆21Updated last year
- Tools for offensive security of NetBackup infrastructures☆39Updated last year
- ☆27Updated 3 months ago
- Malware Muncher is a proof-of-concept Python script that utilizes the Frida framework for binary instrumentation and API hooking, enablin…☆42Updated last year
- USB HID driver emulation with PID/VID (0x3bca/0x27bb) of Plenom A/S Busylight Alpha, that is supported by Mimikatz. When mimikatz is exec…☆19Updated 2 years ago
- Modular malware analysis artifact collection and correlation framework☆52Updated 6 months ago
- Automatically spider the result set of a Censys/Shodan search and download all files where the file name or folder path matches a regex.☆27Updated last year
- Reads and prints information from the website MalAPI.io☆19Updated 2 years ago
- Repo containing my public talks☆22Updated last year
- bootloaders.io is a curated list of known malicious bootloaders for various operating systems. The project aims to assist security profes…☆48Updated last year
- A proof-of-concept re-assembler for reverse VNC traffic.☆25Updated last year
- A cap/pcap packet parser to make life easier when performing stealth/passive reconnaissance.☆21Updated 4 months ago
- Slides from my talk at the Adversary Village, Defcon 30☆29Updated 2 years ago
- Tools helpful for malware analysis☆22Updated 3 months ago
- Collection of generic YARA rules☆14Updated 5 months ago
- ☆31Updated 2 years ago
- Golang bindings for PE-sieve☆40Updated last year
- Lazarus analysis tools and research report☆55Updated 11 months ago
- ☆24Updated last month
- Defeating Anti-Debugging Techniques for Malware Analysis☆13Updated 2 years ago
- SRE - Dissecting Malware for Static Analysis & the Complete Command-line Tool☆49Updated last year
- This is a little plugin to copy disassembly in a way that is usable in YARA rules!☆32Updated last year
- Specialized tool to dump Position Independent Code.☆21Updated 4 years ago
- Static Decryptor for IcedID Malware☆18Updated 2 years ago
- Malware campaigns and APTs research by BlackArrow☆18Updated 4 years ago
- ☆34Updated last year
- Small visualizator for PE files☆67Updated last year
- ☆18Updated 7 months ago
- Triaging Windows event logs based on SANS Poster☆37Updated last year