dfirence / pe-compass

Related projects: ⓘ

• cryptogramfan / Malware-Analysis-Scripts
  Handy scripts to speed up malware analysis
  ☆35Updated 11 months ago
• schrodyn / steezy
  Steezy - Ghetto Yara Generation
  ☆15Updated last year
• colincowie / viper-plugins
  Plugins for the Viper Framework
  ☆14Updated 4 years ago
• nccgroup / yaml2yara
  Generate bulk YARA rules from YAML input
  ☆21Updated 4 years ago
• nccgroup / Royal_APT
  Royal APT - APT15 - Related Information from NCC Group Cyber Defense Operations Research
  ☆52Updated 6 years ago
• matthewdunwoody / PS_logging_reg
  A Windows REG file to enable all default PowerShell logging on a system with PowerShell v5 installed
  ☆16Updated 8 years ago
• jeFF0Falltrades / YARA-Signatures
  A collection of my public YARA signatures for various malware families
  ☆28Updated last month
• proferosec / Threat-Intelligence
  A collection of threat intelligence data such as IOC, Yara and Snort/Suricata Rules etc.
  ☆10Updated 5 years ago
• intezer / analyze-scripts
  ☆25Updated last year
• sisoc-tokyo / mimikatz_detection
  ☆12Updated 6 years ago
• GelosSnake / MalwareResearchAPI
  API functions for Malware Research
  ☆35Updated 5 years ago
• woanware / reg-entropy-scanner
  Scans through registry hives outputting entropy values for key/values, dumps binary contents to files...we are looking for those "fileles…
  ☆10Updated 5 years ago
• Tera0017 / TAFOF-Unpacker
  TA505 unpacker Python 2.7
  ☆45Updated 4 years ago
• airbus-cert / PSTrace
  Trace ScriptBlock execution for powershell v2
  ☆39Updated 4 years ago
• fr0gger / Yara-Unprotect
  This repository regroups the Yara Rules for the Unprotect Project
  ☆24Updated 3 years ago
• adm1nPanda / Usb-Analyzer
  Listen for usb devices and automatically submit all files on device to cuckoo
  ☆12Updated 7 years ago
• SecurityRiskAdvisors / PDBlaster
  ☆47Updated 4 years ago
• prolsen / yara-rules
  ☆13Updated this week
• aaronst / talks
  Presentation materials for talks I've given.
  ☆20Updated 4 years ago
• DissectMalware / MalwareCMDMonitor
  Shows command lines used by latest instances analyzed on Hybrid-Analysis
  ☆43Updated 6 years ago
• zshehri / MITRE_EDR_Eval
  Parsing MITRE EDR Evaluation results
  ☆12Updated 5 years ago
• DissectMalware / base64_substring
  Generate a Yara rule to find base64-encoded files containg a specific keyword
  ☆39Updated 6 years ago
• sebmarchand / pyetw
  ☆13Updated 8 years ago
• CERT-Bund / yara-exporter
  Exporting MISP event attributes to yara rules usable with Thor apt scanner
  ☆22Updated 7 years ago
• DissectMalware / OfficeForensicTools
  A set of tools for collecting forensic information
  ☆24Updated 4 years ago
• arieljt / VTCodeBlocks-Maltego
  Maltego transforms to pivot between PE files based on their VirusTotal codeblocks
  ☆18Updated 3 years ago
• tedhardyMSFT / EventLogUtilities
  Set of utilities for getting information about Windows Events
  ☆15Updated 6 years ago
• re-fox / documentation
  ☆13Updated 3 years ago
• arieljt / VTSubmitter-Maltego
  A Maltego transform for VirusTotal Submitter Information
  ☆30Updated 5 years ago
• mandiant / vivisect
  pure Python binary analysis framework
  ☆21Updated 5 years ago