dfir-it / unsapien

Related projects: ⓘ

• silascutler / DetuxNG
  The Multiplatform Linux Sandbox
  ☆15Updated 9 months ago
• schrodyn / steezy
  Steezy - Ghetto Yara Generation
  ☆15Updated last year
• sebmarchand / pyetw
  ☆13Updated 8 years ago
• kirk-sayre-work / xlmulator
  Python emulator for Excel XLM macros.
  ☆18Updated 4 years ago
• forensiclunch / ETLParser
  Binary commandline executable to parse ETL files
  ☆67Updated 6 years ago
• stvemillertime / Absolutely-Positively-NOT-Hacking-Back-with-Pcap
  Streaming Unexpected Network Byte Sequences with High Probability of Blue Screening or Otherwise Crashing Attacker Command-and-Control No…
  ☆21Updated 5 years ago
• nccgroup / WindowsMemPageDelta
  A Microsoft Windows service to provide telemetry on Windows executable memory page changes to facilitate threat detection
  ☆28Updated 3 years ago
• msuhanov / winmem_decompress
  Extract compressed memory pages from page-aligned data
  ☆41Updated 5 years ago
• msuhanov / regf-samples
  Windows registry samples
  ☆23Updated 5 years ago
• msuhanov / registry-miner
  Registry Miner
  ☆14Updated 6 years ago
• zshehri / MITRE_EDR_Eval
  Parsing MITRE EDR Evaluation results
  ☆12Updated 5 years ago
• matthewdunwoody / PS_logging_reg
  A Windows REG file to enable all default PowerShell logging on a system with PowerShell v5 installed
  ☆16Updated 8 years ago
• Tera0017 / TAFOF-Unpacker
  TA505 unpacker Python 2.7
  ☆45Updated 4 years ago
• fr0gger / Yara-Unprotect
  This repository regroups the Yara Rules for the Unprotect Project
  ☆24Updated 3 years ago
• cyb3rfox / MFTEntryCarver
  Carve files for MFT entries (eg. blkls output or memory dumps). Recovers filenames (long & short), timestamps ($STD & $FN) and data if re…
  ☆21Updated 5 years ago
• mandiant / pulsesecure_exploitation_countermeasures
  ☆22Updated last year
• 2igosha / sunburst_dga
  ☆22Updated 3 years ago
• psrok1 / emu-strings
  Emu-strings project - JScript/VBScript automated dropper analysis system
  ☆17Updated 3 years ago
• MotiBa / ProcessMonitorAnalyzeMalware
  Script to parse Process Monitor XML log file, and give you a summary report.
  ☆23Updated 8 years ago
• SecurityRiskAdvisors / PDBlaster
  ☆47Updated 4 years ago
• bonifield / volatilityGrapher
  Force-Directed Graph Generator for Volatility Ouputs
  ☆26Updated 5 years ago
• Big5-sec / SourceFu
  hopefully a source-to-source deobfuscator, aiming at deobfuscating common scripts languages such as Powershell, VBA and Javascript. Curre…
  ☆40Updated 5 years ago
• snemes / malware-analysis
  ☆23Updated 4 years ago
• aaronst / talks
  Presentation materials for talks I've given.
  ☆20Updated 4 years ago
• nccgroup / Royal_APT
  Royal APT - APT15 - Related Information from NCC Group Cyber Defense Operations Research
  ☆52Updated 6 years ago
• secabstraction / Yara
  ☆22Updated this week
• IceMoonHSV / Sim
  C# User Simulation
  ☆33Updated last year
• cryptogramfan / Malware-Analysis-Scripts
  Handy scripts to speed up malware analysis
  ☆35Updated 11 months ago
• Fmk0 / templates
  ☆36Updated 4 years ago
• WMSR / utils
  ☆10Updated 4 years ago