AllsafeCyberSecurity / malware-analysis-at-scale-defeating-emotet-by-ghidra

Related projects ⓘ

Alternatives and complementary repositories for malware-analysis-at-scale-defeating-emotet-by-ghidra

• herosi / triage-collector
  ☆21Updated last month
• Yamato-Security / RustyBlue
  RustyBlue is a rust implementation of DeepblueCLI, a forensics log analyzer for finding evidence of compromise from windows event logs.
  ☆68Updated 2 years ago
• CyberDefenseInstitute / CDIR-A
  CDIR Analyzer - parsers for data collected by CDIR Collector
  ☆18Updated last year
• NextronSystems / gimphash
  Imphash-like calculation on Golang binaries
  ☆47Updated 2 years ago
• PowderKegTech / mushikago
  an automatic penetration testing tool
  ☆38Updated 3 years ago
• JPCERTCC / ToolAnalysisResultSheet_jp
  分析ツール結果シート
  ☆16Updated 6 years ago
• JPCERTCC / Lazarus-research
  Lazarus analysis tools and research report
  ☆55Updated 10 months ago
• JPCERTCC / jpcert-yara
  JPCERT/CC public YARA rules repository
  ☆101Updated 4 months ago
• stairwell-inc / cobalt-strike-stager-parser
  ☆34Updated last year
• sisoma2 / malware_analysis
  Scripts, Yara rules and other files developed during malware investigations
  ☆24Updated 2 years ago
• nao-sec / tknk_scanner
  Community-based integrated malware identification system
  ☆82Updated last year
• Recruit-CSIRT / LinuxTriage
  R-CSIRT Linux Triage tool
  ☆37Updated 6 years ago
• JPCERTCC / SurfaceAnalysis-on-Cloud
  Surface Analysis System on Cloud
  ☆19Updated 10 months ago
• stvemillertime / ConventionEngine
  ConventionEngine - A Yara Rulepack for PDB Path Hunting
  ☆37Updated last year
• g-les / 100DaysofYARA
  100 Days of YARA to be updated with rules & ideas as the year progresses
  ☆56Updated last year
• t-tani / defender2yara
  Convert Microsoft Defender Antivirus Signatures (VDM) into YARA rules
  ☆11Updated this week
• elceef / yara-rulz
  Collection of generic YARA rules
  ☆14Updated 4 months ago
• Recruit-CSIRT / MacRipper
  A DFIR tool to analyze artifacts on macOS
  ☆31Updated 3 years ago
• StefanKelm / yara-rules
  Links to malware-related YARA rules
  ☆14Updated 2 years ago
• CIRCL / factual-rules-generator
  Factual-rules-generator is an open source project which aims to generate YARA rules about installed software from a machine.
  ☆76Updated 2 years ago
• myrtus0x0 / SMAT
  Standardized Malware Analysis Tool
  ☆51Updated 3 years ago
• c3rb3ru5d3d53c / mwcfg-modules
  Malware Configuration Extraction Modules
  ☆47Updated 11 months ago
• honeybag / honeybag
  Honeybag helps you to create 'bait archive' with any folders and files, notify you if someone accesses it
  ☆16Updated 4 years ago
• PwCUK-CTO / ScatterBee_Analysis
  Scripts to aid analysis of files obfuscated with ScatterBee.
  ☆15Updated last year
• JPCERTCC / YAMA
  Yet Another Memory Analyzer for malware detection
  ☆175Updated 5 months ago
• avast / yarang
  Alternative YARA scanning engine
  ☆67Updated 2 years ago
• jstrosch / subparse
  Modular malware analysis artifact collection and correlation framework
  ☆52Updated 6 months ago
• usualsuspect / yara_vt_mock
  Emulates the VirusTotal "vt" YARA module for livehunt rule debugging/testing
  ☆21Updated last year
• 0x534a / dynmx
  Signature-based detection of malware features based on Windows API call sequences. It's like YARA for sandbox API traces!
  ☆82Updated last year
• airbus-cert / PSTrace
  Trace ScriptBlock execution for powershell v2
  ☆39Updated 4 years ago