Maco - Malware config extractor framework
☆55Oct 27, 2026Updated last week
Alternatives and similar repositories for Maco
Users that are interested in Maco are comparing it to the libraries listed below. We may earn a commission when you buy through links labeled 'Ad' on this page.
Sorting:
- Python Library for ConfigExtractor☆16Oct 27, 2026Updated last week
- Sample staging & detonation utility to be used in combination with Cuckoo Sandbox.☆13Oct 26, 2026Updated last week
- Community modules for CAPE Sandbox☆118Oct 30, 2026Updated last week
- Assemblyline 4 Malware detonation service (CAPEv2)☆13Oct 22, 2026Updated 2 weeks ago
- Docker compose Assemblyline 4 deployment (appliance and development)☆17Oct 26, 2026Updated last week
- End-to-end encrypted email - Proton Mail • AdSpecial offer: 40% Off Yearly / 80% Off First Month. All Proton services are open source and independently audited for security.
- DC3 Malware Configuration Parser (DC3-MWCP) is a framework for parsing configuration information from malware. The information extracted …☆354Jul 17, 2026Updated 3 months ago
- YARA rule metadata specification and validation utility / Spécification et validation pour les règles YARA☆119Updated this week
- Tricard - Malware Sandbox Fingerprinting☆24Dec 11, 2023Updated 2 years ago
- Configuration Extractors for Malware☆128Oct 22, 2026Updated 2 weeks ago
- This is a malware analyzer for Mac OS X that extends the Cuckoo Sandbox project (https://cuckoosandbox.org/)☆23Jul 8, 2016Updated 10 years ago
- JXA script for Mythic that prints the TCC.db☆15Apr 18, 2021Updated 5 years ago
- CLI interface to get Ransomware attacks data from ransomwhat.telemetry.ltd☆13Feb 8, 2023Updated 3 years ago
- Python implementation of the CaRT library for (un)inerting files.☆59Feb 10, 2025Updated last year
- Base components for Assemblyline 4 (Datastore, ODM, Filestore, Remote Datatypes, utils function, etc...)☆74Updated this week
- AI Agents on DigitalOcean Gradient AI Platform • AdBuild production-ready AI agents using customizable tools or access multiple LLMs through a single endpoint. Create custom knowledge bases or connect external data.
- A robust, multiprocessing-capable, multi-family RAT config parser/config extractor for AsyncRAT, DcRAT, VenomRAT, QuasarRAT, XWorm, Xeno …☆91May 23, 2026Updated 5 months ago
- Generator of regular expressions☆15Apr 11, 2025Updated last year
- MacOS forensic collector for Velociraptor. 70 artefacts covering browsers, communications, user activity, persistence, security, logs, fi…☆17May 26, 2026Updated 5 months ago
- Scripts, Yara rules and other files developed during malware investigations☆28Aug 19, 2022Updated 4 years ago
- Malduck is your ducky companion in malware analysis journeys☆357Jun 22, 2025Updated last year
- capemon: CAPE's monitor☆156Updated this week
- Utilities for working with vivisect☆26Sep 23, 2026Updated last month
- ☆20May 10, 2023Updated 3 years ago
- Run YARA rules on process memory and execute Python scripts on matches☆13May 15, 2018Updated 8 years ago
- Wordpress hosting with auto-scaling - Free Trial Offer • AdFully Managed hosting for WordPress and WooCommerce businesses that need reliable, auto-scalable performance. Cloudways SafeUpdates now available.
- AssemblyLine4 documentation☆29Sep 16, 2026Updated last month
- Sigma signatures matcher written in Python☆10Dec 23, 2024Updated last year
- Basic SDK for Intezer Platform API 2.0☆33Oct 25, 2026Updated last week
- Malware Configuration Extraction Modules☆51Nov 25, 2023Updated 2 years ago
- Malware repository component for samples & static configuration with REST API interface.☆409Updated this week
- Sigma Engine implementation in TypeScript☆28Mar 5, 2023Updated 3 years ago
- ☆20Dec 30, 2025Updated 10 months ago
- ☆14Aug 24, 2026Updated 2 months ago
- This tool aims at parsing Microsoft Protection logs to provide relevant data to forensic analysts during incident responses.☆22Sep 30, 2022Updated 4 years ago
- Simple, predictable pricing with DigitalOcean hosting • AdAlways know what you'll pay with monthly caps and flat pricing. Enterprise-grade infrastructure trusted by 600k+ customers.
- ☆34Oct 20, 2026Updated 2 weeks ago
- DRAKVUF Sandbox - automated hypervisor-level malware analysis system☆1,370Updated this week
- C++ implementation of LZJD algorithm☆11Jul 18, 2020Updated 6 years ago
- Rulezet is an open-source web platform for sharing, evaluating, improving, and managing cybersecurity detection rules (YARA, Sigma, Suric…☆58Updated this week
- #️⃣ 🕸️ 👤 HTTP Headers Hashing☆11Aug 27, 2023Updated 3 years ago
- ☆10Updated this week
- Scripts and tools accompanying HP Threat Research blog posts and reports.☆50Apr 10, 2024Updated 2 years ago