Neo23x0 / xorex
XOR Key Extractor
☆48Updated last month
Related projects: ⓘ
- A YARA Rule Performance Measurement Tool☆58Updated 6 months ago
- Malware similarity platform with modularity in mind.☆75Updated 3 years ago
- Random hunting ordiented yara rules☆95Updated last year
- VSCode extension for the YARA pattern matching language☆60Updated 8 months ago
- Various capabilities for static malware analysis.☆75Updated 2 weeks ago
- Collection of YARA signatures from individual research☆41Updated 9 months ago
- Tool to decompress data from Windows 10 page files and memory dumps, that has been compressed by the Windows 10 memory manager.☆47Updated 5 years ago
- ConventionEngine - A Yara Rulepack for PDB Path Hunting☆36Updated last year
- Scripts and tools accompanying HP Threat Research blog posts and reports.☆48Updated 5 months ago
- Simple yara rule manager☆64Updated last year
- Steezy - Ghetto Yara Generation☆15Updated last year
- C# User Simulation☆33Updated last year
- Documentation and parsers for different anti-virus quarantine formats.☆41Updated 3 years ago
- A repo to document API functions mapped to security events across diverse platforms☆74Updated 4 years ago
- Generate YARA rules for OOXML documents.☆37Updated last year
- Generate a Yara rule to find base64-encoded files containg a specific keyword☆39Updated 6 years ago
- Standardized Malware Analysis Tool☆51Updated 3 years ago
- A tool to help malware analysts signature unique parts of RTF documents☆28Updated 7 months ago
- Machine Interrogation To Identify Gaps & Techniques for Execution☆32Updated 2 years ago
- Merge all Yara rules from official Yara github repository in one .yar file☆28Updated 6 years ago
- evtx2json extracts events of interest from event logs, dedups them, and exports them to json.☆41Updated 3 years ago
- Userland API monitor for threat hunting☆54Updated 4 years ago
- TA505 unpacker Python 2.7☆45Updated 4 years ago
- Detect possible sysmon logging bypasses given a specific configuration☆107Updated 5 years ago
- labs_modern_malware_c2 Originally supporting Defcon workshop, will morph into Attack Defend for C2.☆18Updated 2 years ago
- A GUI/REST interface to find similarities in large sets (think: binaries). Based on ssdeep.☆19Updated 2 years ago
- 100 Days of YARA to be updated with rules & ideas as the year progresses☆57Updated last year
- Extract BITS jobs from QMGR queue and store them as CSV records☆73Updated 2 months ago
- Factual-rules-generator is an open source project which aims to generate YARA rules about installed software from a machine.☆74Updated 2 years ago
- hopefully a source-to-source deobfuscator, aiming at deobfuscating common scripts languages such as Powershell, VBA and Javascript. Curre…☆40Updated 5 years ago