CERT-Polska / karton
Distributed malware processing framework based on Python, Redis and S3.
☆392Updated 2 weeks ago
Related projects ⓘ
Alternatives and complementary repositories for karton
- Malware repository component for samples & static configuration with REST API interface.☆328Updated 2 weeks ago
- Malduck is your ducky companion in malware analysis journeys☆318Updated 4 months ago
- Standard collection of rules for capa: the tool for enumerating the capabilities of programs☆537Updated last week
- Collection of private Yara rules.☆326Updated 2 months ago
- DRAKVUF Sandbox - automated hypervisor-level malware analysis system☆1,058Updated last week
- ReversingLabs YARA Rules☆760Updated last month
- A collection of YARA rules we wish to share with the world, most probably referenced from http://blog.inquest.net.☆363Updated 2 years ago
- YARA malware query accelerator (web frontend)☆413Updated this week
- MBC content in markdown☆371Updated 2 weeks ago
- IOC from articles, tweets for archives☆310Updated 10 months ago
- Repository of YARA rules made by Trellix ATR Team☆569Updated 10 months ago
- Analysis of malware and Cyber Threat Intel of APT and cybercriminals groups☆702Updated last year
- Threat Hunting tool about Sysmon and graphs☆329Updated last year
- Arya is a unique tool that produces pseudo-malicious files meant to trigger YARA rules. You can think of it like a reverse YARA.☆239Updated last year
- YARA Rules I come across on the internet☆333Updated 6 months ago
- Python scripts for Malware Bazaar☆146Updated 5 months ago
- 🧭 The artifactcollector is a customizable agent to collect forensic artifacts on any Windows, macOS or Linux system☆268Updated 3 weeks ago
- Extract and Deobfuscate XLM macros (a.k.a Excel 4.0 Macros)☆571Updated 6 months ago
- Security ML models encoded as Yara rules☆211Updated last year
- Automatic deployment of Cuckoo Sandbox malware lab using Packer and Vagrant☆234Updated last year
- A standalone SIGMA-based detection tool for EVTX, Auditd and Sysmon for Linux logs☆677Updated last week
- A Binary Genetic Traits Lexer Framework☆388Updated 11 months ago
- ☆187Updated last year
- Signatures and IoCs from public Volexity blog posts.☆315Updated 3 months ago
- Sandbox for automated Linux malware analysis.☆474Updated last year
- Volatility plugin for extracts configuration data of known malware☆482Updated 10 months ago
- Collaborative Malware Analysis Platform at Scale☆694Updated last week
- ☆505Updated last month
- Online hash checker for Virustotal and other services☆808Updated 5 months ago
- Clusters and elements to attach to MISP events or attributes (like threat actors)☆528Updated this week