cylance / MarkovObfuscate
Use Markov Chains to obfuscate data as other data
☆52Updated 8 years ago
Alternatives and similar repositories for MarkovObfuscate:
Users that are interested in MarkovObfuscate are comparing it to the libraries listed below
- Shows command lines used by latest instances analyzed on Hybrid-Analysis☆43Updated 6 years ago
- Sandbox feature upgrade with the help of wrapped samples☆76Updated 6 years ago
- Generate ATT&CK Navigator layer file from PowerShell Empire agent logs☆49Updated 6 years ago
- SilkETW & SilkService☆40Updated 5 years ago
- Generate a Yara rule to find base64-encoded files containg a specific keyword☆40Updated 6 years ago
- XOR Key Extractor☆50Updated 6 months ago
- ☆59Updated 5 years ago
- ☆53Updated 4 years ago
- An offensive Powershell console☆30Updated 9 years ago
- Various Modules & Scripts for use with Viper Framework☆27Updated 5 years ago
- Python tool and library to help analyze files during malware triage and analysis.☆78Updated 4 years ago
- SANS Hunting on the Cheap☆35Updated 8 years ago
- A YARA Rule Performance Measurement Tool☆58Updated 11 months ago
- Various config files obtained during malware analysis☆67Updated 6 years ago
- A warehouse for your malware☆134Updated 11 years ago
- Simple DDE object detector☆56Updated 7 years ago
- Talk given at DerbyCon and RuxCon 2016☆22Updated 8 years ago
- A framework to generate unique test cases based on code snippets to test techniques☆56Updated 3 years ago
- Python parser for Red Canary's Atomic Red Team Yamls☆27Updated 6 years ago
- Performs OCR on image files and scans them for matches to YARA rules☆40Updated 6 years ago
- Malware Analysis, Threat Intelligence and Reverse Engineering: LABS☆82Updated 4 years ago
- Force-Directed Graph Generator for Volatility Ouputs☆26Updated 5 years ago
- 504 VSAgent☆23Updated 7 years ago
- ☆76Updated 6 years ago
- Mystique may be used to discover infection markers that can be used to vaccinate endpoints against malware. It receives as input a malici…☆82Updated 7 years ago
- Repository for my ATT&CK analysis research.☆68Updated 5 years ago
- A Windows Event Processing Utility☆46Updated 7 years ago
- A repo to hold some scripts pertaining WMI (Windows implementation of WBEM) forensics☆85Updated 7 years ago
- ☆68Updated 7 years ago
- Duo MFA auditing tool to test users' likelihood of approving unexpected push notifications☆13Updated 6 years ago