evilsocket / sauronLinks
A minimalistic cross-platform malware scanner with non-blocking realtime filesystem monitoring using YARA rules.
☆227Updated 2 years ago
Alternatives and similar repositories for sauron
Users that are interested in sauron are comparing it to the libraries listed below
Sorting:
- WhiteBeam: Transparent endpoint security☆101Updated 2 years ago
- Entropy scanner for Linux to detect packed or encrypted binaries related to malware. Finds malicious files and Linux processes and gives …☆158Updated last year
- A fast and secure multi protocol honeypot.☆323Updated 2 years ago
- MalwareDB: bookkeeping for malware, goodware, and unknown files with relationship discovery☆50Updated this week
- Let's be scanned. A low-interaction honeypot focused on network scanners and bots. It integrates very well with IVRE to build a self-host…☆124Updated this week
- Login Pages Database forms a knowledge base on login pages related to malicious activities (C2 panels, phishing kits...).☆39Updated 2 years ago
- Rip Raw is a small tool to analyse the memory of compromised Linux systems.☆131Updated 3 years ago
- BSidesRoc 2022 Linux Malware/Forensics Course☆76Updated 3 years ago
- How to setup a honeypot with an IDS, ELK and TLS traffic inspection☆158Updated 3 years ago
- Signature based honeypot detector tool written in Golang☆99Updated 4 months ago
- NIST-based CVE lookup store and API powered by Rust.☆132Updated last month
- Signing-key abuse and update exploitation framework☆130Updated 2 months ago
- Malware vulnerability intel tool for third-party attackers☆121Updated 9 months ago
- Artifact collection tool for *nix systems☆208Updated last year
- DEbian Cve REproducer Tool☆25Updated 2 weeks ago
- Pandora is an analysis framework to discover if a file is suspicious and conveniently show the results☆266Updated this week
- Melody is a transparent internet sensor built for threat intelligence. Supports custom tagging rules and vulnerable application simulatio…☆141Updated 5 months ago
- A zero dependency and customizable Python library for scanning Windows and Linux process memory.☆66Updated last year
- UniSBOM is a tool to build a software bill of materials on any platform with a unified data format.☆35Updated 2 years ago
- TAPIR is a multi-user, client/server, incident response framework☆44Updated 3 years ago
- CyberChef - Detection Engineering, TI, DFIR, Malware Analysis Edition☆65Updated 2 years ago
- Analyse a forensic target (such as a directory) to find and report files found and not found from CIRCL hashlookup public service - https…☆126Updated last year
- Threat Intel Platform for T-POTs☆159Updated 3 weeks ago
- This repository contains analysis scripts, YARA rules, and additional IoCs related to our Telekom Security blog posts.☆116Updated last year
- Data visualization for blue teams☆126Updated 2 years ago
- reveal origins behind reverse proxies & hidden services 👀 🧅 💻☆36Updated 3 weeks ago
- My very personal and opinionatedly organized infosec/cybersec sources in one OPML file☆57Updated 2 years ago
- A PoC ransomware sample to test out your ransomware response strategy.☆210Updated 3 months ago
- Sandbox samples and monitor them with kunai☆25Updated last month
- A ransomware group monitoring bot written in C#.☆57Updated 3 years ago