fboldewin / misc_malware

Related projects: ⓘ

• jstrosch / subparse
  Modular malware analysis artifact collection and correlation framework
  ☆49Updated 4 months ago
• JPCERTCC / Lazarus-research
  Lazarus analysis tools and research report
  ☆54Updated 8 months ago
• embee-research / IcedID
  Static Decryptor for IcedID Malware
  ☆18Updated last year
• embee-research / Yara-detection-rules
  Yara Rules for Modern Malware
  ☆68Updated 6 months ago
• advanced-threat-research / DarkSide-Config-Extract
  ☆31Updated 2 years ago
• ald3ns / copy-as-yara
  This is a little plugin to copy disassembly in a way that is usable in YARA rules!
  ☆30Updated last year
• DissectMalware / MDIExtractor
  ☆15Updated 2 years ago
• DidierStevens / FalsePositives
  Tools that trigger False Positive AV alerts
  ☆42Updated last year
• fr0gger / MalwareMuncher
  Malware Muncher is a proof-of-concept Python script that utilizes the Frida framework for binary instrumentation and API hooking, enablin…
  ☆42Updated last year
• BinaryDefense / YaraMemoryScanner
  Simple PowerShell script to enable process scanning with Yara.
  ☆86Updated last year
• yasser-alghamdi / winterfell-hunt
  Winterfell hunt is a python script to perform auto threat hunting for malicious activities in windows OS based on collected data by winte…
  ☆14Updated 4 years ago
• vc0RExor / Quick-Analysis
  Quick analysis focusing on most important of a Malware or a Threat
  ☆39Updated last year
• pr0xylife / IcedID
  ☆34Updated 9 months ago
• jstrosch / subcrawl
  SubCrawl is a modular framework for discovering open directories, identifying unique content through signatures and organizing the data w…
  ☆49Updated 3 months ago
• MalGamy / YARA_Rules
  ☆63Updated last year
• CIRCL / factual-rules-generator
  Factual-rules-generator is an open source project which aims to generate YARA rules about installed software from a machine.
  ☆74Updated 2 years ago
• ACE-Responder / ace-proctree
  Create a cool process tree like https://twitter.com/ACEResponder.
  ☆34Updated last year
• hpthreatresearch / tools
  Scripts and tools accompanying HP Threat Research blog posts and reports.
  ☆48Updated 5 months ago
• frostisec / malware_lure
  Collection of Malware Lures
  ☆23Updated 2 years ago
• shabarkin / pointer
  Pointer was developed for massive hunting and mapping Cobalt Strike servers exposed on the internet.
  ☆65Updated 2 years ago
• FarghlyMal / Config-Extractors
  ☆26Updated last month
• slaughterjames / excelpeek
  ☆37Updated 2 years ago
• Symantec / threathunters
  ☆27Updated last week
• g-les / 100DaysofYARA
  100 Days of YARA to be updated with rules & ideas as the year progresses
  ☆57Updated last year
• alwashali / detection-validation
  Detection rule validation
  ☆41Updated 10 months ago
• c2links / NoWhere2Hide
  C2 Active Scanner
  ☆45Updated 3 months ago
• keydet89 / LNK
  Repository for LNK stuff
  ☆27Updated 2 years ago
• 3vangel1st / 100DaysOfYARA
  ☆27Updated 2 years ago
• reecdeep / HiveV5_file_decryptor
  Hive v5 file decryption algorithm
  ☆34Updated last year
• sourcefrenchy / DEFCON-30---Exotic-Data-Exfiltration
  Slides from my talk at the Adversary Village, Defcon 30
  ☆28Updated last year