decalage2 / ViperMonkey
A VBA parser and emulation engine to analyze malicious macros.
☆1,089Updated 9 months ago
Alternatives and similar repositories for ViperMonkey:
Users that are interested in ViperMonkey are comparing it to the libraries listed below
- Extract and Deobfuscate XLM macros (a.k.a Excel 4.0 Macros)☆578Updated last year
- Noriben - Portable, Simple, Malware Analysis Sandbox☆1,152Updated 3 weeks ago
- yarGen is a generator for YARA rules☆1,637Updated last month
- Malware Configuration And Payload Extraction☆756Updated 5 months ago
- Online hash checker for Virustotal and other services☆825Updated last month
- PowerShell script for deobfuscating encoded PowerShell scripts☆425Updated 4 years ago
- A VBA p-code disassembler☆469Updated 3 years ago
- Analysis of malware and Cyber Threat Intel of APT and cybercriminals groups☆706Updated 2 years ago
- PowerShell Obfuscation Detection Framework☆735Updated last year
- RDP Bitmap Cache parser☆531Updated 3 months ago
- YARA Rules I come across on the internet☆338Updated last year
- DRAKVUF Sandbox - automated hypervisor-level malware analysis system☆1,133Updated this week
- Windows Events Attack Samples☆2,352Updated 2 years ago
- ReversingLabs YARA Rules☆816Updated 3 weeks ago
- ☆1,072Updated 6 years ago
- Yara Rule Analyzer and Statistics☆373Updated 2 years ago
- Sources, configuration and how to detect evil things utilizing Microsoft Sysmon.☆917Updated last year
- A static analyzer for PE executables.☆1,061Updated last year
- Indicators from Unit 42 Public Reports☆711Updated 2 weeks ago
- Repository of YARA rules made by Trellix ATR Team☆594Updated last month
- Utilities for Sysmon☆1,518Updated 2 months ago
- Standard collection of rules for capa: the tool for enumerating the capabilities of programs☆576Updated last month
- analyzeMFT.py is designed to fully parse the MFT file from an NTFS filesystem and present the results as accurately as possible in multip…☆474Updated 7 months ago
- YARA signature and IOC database for my scanners and tools☆2,608Updated last week
- A Powershell incident response framework☆1,601Updated 2 years ago
- ☆428Updated 2 years ago
- CyLR - Live Response Collection Tool☆675Updated 2 years ago
- ☆710Updated 2 years ago
- FakeNet-NG - Next Generation Dynamic Network Analysis Tool☆1,904Updated last month
- Digital Forensics artifact repository☆1,112Updated 4 months ago