Volatility plugin for extracts configuration data of known malware
☆498Dec 22, 2023Updated 2 years ago
Alternatives and similar repositories for MalConfScan
Users that are interested in MalConfScan are comparing it to the libraries listed below. We may earn a commission when you buy through links labeled 'Ad' on this page.
Sorting:
- Cuckoo Sandbox plugin for extracts configuration data of known malware☆130Dec 22, 2023Updated 2 years ago
- Repository of YARA rules made by Trellix ATR Team☆631Mar 18, 2025Updated last year
- Malware Configuration And Payload Extraction☆763Nov 22, 2024Updated last year
- Investigate suspicious activity by visualizing Sysmon's event log☆432Dec 22, 2023Updated 2 years ago
- Artifact analysis tools by JPCERT/CC Analysis Center☆463Aug 14, 2025Updated last year
- Deploy to Railway using AI coding agents - Free Credits Offer • AdUse Claude Code, Codex, OpenCode, and more. Autonomous software development now has the infrastructure to match with Railway.
- Automatic YARA rule generation for Malpedia☆170Sep 8, 2022Updated 4 years ago
- ReversingLabs YARA Rules☆951Nov 3, 2025Updated 11 months ago
- YARA signature and IOC database for my scanners and tools☆3,053Oct 17, 2026Updated last week
- IOC from articles, tweets for archives☆318Dec 12, 2023Updated 2 years ago
- Investigate malicious Windows logon by visualizing and analyzing Windows event log☆3,296Aug 2, 2026Updated 2 months ago
- A collection of YARA rules we wish to share with the world, most probably referenced from http://blog.inquest.net.☆389May 11, 2022Updated 4 years ago
- ☆1,133Dec 19, 2023Updated 2 years ago
- Windows Events Attack Samples☆2,642Jan 24, 2023Updated 3 years ago
- Community-based integrated malware identification system☆81Dec 10, 2022Updated 3 years ago
- AI Agents on DigitalOcean Gradient AI Platform • AdBuild production-ready AI agents using customizable tools or access multiple LLMs through a single endpoint. Create custom knowledge bases or connect external data.
- Toolset for research malware and Cobalt Strike beacons☆210Mar 11, 2025Updated last year
- Noriben - Portable, Simple, Malware Analysis Sandbox☆1,309Sep 18, 2026Updated last month
- YARA malware query accelerator (web frontend)☆443Feb 3, 2026Updated 8 months ago
- yarGen is a generator for YARA rules☆1,824Jan 10, 2026Updated 9 months ago
- A standalone SIGMA-based detection tool for EVTX, Auditd and Sysmon for Linux logs☆871Oct 20, 2026Updated last week
- A curated list of awesome YARA rules, tools, and people.☆4,307Jun 15, 2026Updated 4 months ago
- A machine learning tool that ranks strings based on their relevance for malware analysis.☆766Jul 24, 2026Updated 3 months ago
- Collection of private Yara rules.☆392Jan 28, 2026Updated 9 months ago
- DRAKVUF Sandbox - automated hypervisor-level malware analysis system☆1,362Oct 20, 2026Updated last week
- 1-Click AI Models by DigitalOcean Gradient • AdDeploy popular AI models on DigitalOcean Gradient GPU virtual machines with just a single click. Zero configuration with optimized deployments.
- Beagle is an incident response and digital forensics tool which transforms security logs and data into graphs.☆1,359Dec 13, 2022Updated 3 years ago
- Indicators of Compromises (IOC) of our various investigations☆1,992Oct 22, 2026Updated last week
- A VBA parser and emulation engine to analyze malicious macros.☆1,132Jul 10, 2024Updated 2 years ago
- A toolset to make a system look as if it was the victim of an APT attack☆2,784Sep 23, 2025Updated last year
- Malwoverview is a first response tool for threat hunting across VirusTotal, Hybrid Analysis, URLHaus, Polyswarm, Malshare, Alien Vault, M…☆4,135Sep 22, 2026Updated last month
- ☆131Feb 2, 2025Updated last year
- Imaginary C2 is a python tool which aims to help in the behavioral (network) analysis of malware. Imaginary C2 hosts a HTTP server which …☆446Oct 26, 2022Updated 4 years ago
- Online hash checker for Virustotal and other services☆858Sep 22, 2026Updated last month
- Analysis of malware and Cyber Threat Intel of APT and cybercriminals groups☆729Dec 26, 2022Updated 3 years ago
- Deploy to Railway using AI coding agents - Free Credits Offer • AdUse Claude Code, Codex, OpenCode, and more. Autonomous software development now has the infrastructure to match with Railway.
- PEframe is a open source tool to perform static analysis on Portable Executable malware and malicious MS Office documents.☆628Aug 8, 2022Updated 4 years ago
- Vba2Graph - Generate call graphs from VBA code, for easier analysis of malicious documents.☆283Dec 13, 2021Updated 4 years ago
- DC3 Malware Configuration Parser (DC3-MWCP) is a framework for parsing configuration information from malware. The information extracted …☆353Jul 17, 2026Updated 3 months ago
- A collection of Indicators of Compromise (IoCs), most aligning with samples derived from the signatures in the YARA-Signatures repo☆30Jun 11, 2020Updated 6 years ago
- FLARE Obfuscated String Solver - Automatically extract obfuscated strings from malware.☆4,203Updated this week
- Python Decoders for Common Remote Access Trojans☆1,122Jul 16, 2024Updated 2 years ago
- Code and yara rules to detect and analyze Cobalt Strike☆272May 5, 2021Updated 5 years ago