adamkramer / rapid_envLinks
Rapid deployment of Windows environment (files, registry keys, mutex etc) to facilitate malware analysis
☆41Updated 10 years ago
Alternatives and similar repositories for rapid_env
Users that are interested in rapid_env are comparing it to the libraries listed below
Sorting:
- Recurse through a registry, identifying values with large data -- a registry malware hunter☆45Updated 9 years ago
- Bit9 + Carbon Black Threat Intelligence☆81Updated 9 years ago
- Detects code differentials between executables in disk and the corresponding processes/modules in memory☆115Updated 5 years ago
- Scripts for dealing with various ek's☆69Updated 8 years ago
- Automated memory forensics analysis☆32Updated 6 years ago
- Codex Gigas malware DNA profiling search engine discovers malware patterns and characteristics assisting individuals who are attracted in…☆156Updated 6 years ago
- Some IR notes☆73Updated 9 years ago
- Sublime Malware Research Tool☆66Updated last year
- A Rekall interactive document for a Memory Analysis workshop/course.☆43Updated 8 years ago
- A dumb set of scripts for building a cuckoo rig☆61Updated 8 years ago
- An environment for comprehensive, automated analysis of web-based exploits, based on Cuckoo sandbox.☆124Updated 10 years ago
- VolDiff: Malware Memory Footprint Analysis based on Volatility☆197Updated 8 years ago
- ☆75Updated 9 years ago
- A warehouse for your malware☆135Updated 2 months ago
- Volatility Plugins☆22Updated 10 years ago
- Modified edition of cuckoo community modules☆50Updated 8 years ago
- A python script used to parse the SAM registry hive.☆75Updated 8 years ago
- Scalable Binary Data Extraction in Hadoop☆144Updated 11 years ago
- Cryptowall Tooling & Information☆37Updated 9 years ago
- Python tools for IOC (Indicator of Compromise) handling☆96Updated 4 years ago
- Unpack MIME attachments from a file and check them against virustotal.com☆44Updated 9 years ago
- Small tool for disassembling shellcode (using objdump)☆148Updated 3 years ago
- Yara is awesome, but sometimes you need to manipulate the data streams you're scanning in different ways.☆98Updated 11 years ago
- openioc_scan Volatility Framework plugin☆44Updated 9 years ago
- Manage VT Alerts☆62Updated 9 years ago
- Malware Repository Framework☆99Updated 7 years ago
- Command line tool for scanning streams within office documents plus xor db attack☆126Updated 2 years ago
- Public Profile Repository for Rekall Memory Forensic.☆101Updated 5 years ago
- Malware Control Monitor☆88Updated 10 years ago
- Reconstruct process trees from event logs☆147Updated 5 years ago