This tool clusters malware samples and extracts core shared artefacts by combining static analysis, optional dynamic analysis, and progressive comparison inside each cluster.
☆25Apr 11, 2026Updated 6 months ago
Alternatives and similar repositories for MalCluster
Users that are interested in MalCluster are comparing it to the libraries listed below. We may earn a commission when you buy through links labeled 'Ad' on this page.
Sorting:
- FULL reverse engineering of a 64-bit keylogger☆15Sep 5, 2025Updated last year
- Daily C2 threat intelligence feed☆20May 3, 2026Updated 5 months ago
- ☆10Sep 11, 2021Updated 5 years ago
- The YouTube OSINT Reconnaissance Tool is a powerful Python-based open source intelligence gathering utility designed to extract valuable …☆15Sep 10, 2025Updated last year
- This library provides functionality for fetching and parsing information about Common Vulnerabilities and Exposures (CVE) using the NIST …☆14May 11, 2023Updated 3 years ago
- Deploy on Railway without the complexity - Free Credits Offer • AdConnect your repo and Railway handles the rest with instant previews. Quickly provision container image services, databases, and storage volumes.
- Local-LLM alert triage for self-hosted SOCs.☆12Sep 25, 2026Updated last month
- An autonomous Digital Forensics & Incident Response toolkit built on Claude's skill and MCP ecosystem☆18Mar 24, 2026Updated 7 months ago
- Certego components library. Built on React.js + reactstrap + more.☆12Mar 25, 2026Updated 7 months ago
- ☆17Nov 12, 2017Updated 8 years ago
- Repository with Domains Related to Tycoon2FA Phishing Infrastructure☆20Jun 21, 2026Updated 4 months ago
- It's an experiment based on 09 KDD paper, Beyond Blacklists: Learning to Detect Malicious Web Sites from Suspicious URLs☆10Jan 8, 2019Updated 7 years ago
- snake-core - the real snake☆15Jul 11, 2023Updated 3 years ago
- A curated arsenal of 55 blue team / detection engineering tools across 13 sections, mapped to real SOC workflows. Where a tool appears in…☆15Jul 17, 2026Updated 3 months ago
- Runtime security for AI agents. In-process, zero dependencies, Apache 2.0.☆29Updated this week
- End-to-end encrypted cloud storage - Proton Drive • AdSpecial offer: 40% Off Yearly / 80% Off First Month. Protect your most important files, photos, and documents from prying eyes.
- Automated workflows in disposable macOS VMs. 📦☆16Updated this week
- Security content lifecycle management for Microsoft Sentinel and Microsoft Defender XDR.☆17Oct 18, 2026Updated last week
- Cheat-Sheet with events too look out for when analysing malicious Office documents☆19Oct 21, 2017Updated 9 years ago
- Repository that contains a set of purposefully erroneous Yara rules.☆61Jul 23, 2025Updated last year
- ☆12May 10, 2023Updated 3 years ago
- Scripts to help and speed up reversing activities☆14Jun 30, 2026Updated 3 months ago
- Microsoft Sentinel SIEM Log Source Analyzer☆31Updated this week
- List with File Extensions used by Ransomware☆42Oct 8, 2026Updated 3 weeks ago
- Repository behind artefacts.help☆14Updated this week
- Virtual machines for every use case on DigitalOcean • AdGet dependable uptime with 99.99% SLA, simple security tools, and predictable monthly pricing with DigitalOcean's virtual machines, called Droplets.
- The self-hosted KQL query management platform for SOC teams☆22May 20, 2026Updated 5 months ago
- Post-Exploitation EVTX Analyzer for BloodHound Mapping☆15May 8, 2026Updated 5 months ago
- YARA Rule Strings Statistics Calculator and Malware Research Helper☆14Jul 24, 2021Updated 5 years ago
- Open-source collaborative note-taking platform for cybersecurity and CTI teams. IOC auto-extraction, STIX 2.1 export, real-time ed…☆24Apr 6, 2026Updated 6 months ago
- A collection of PowerShell scripts designed to transform raw forensic data into formats suitable for analysis☆12Jan 18, 2026Updated 9 months ago
- FLARE floss applied to all unpacked+dumped samples in Malpedia, pre-processed for further use.☆87Jan 6, 2026Updated 9 months ago
- Reports in .MD format☆29Jul 13, 2026Updated 3 months ago
- Python script to parse JSON data exported from SHODAN nad create IP:PORT list to use with other tools☆25Nov 1, 2017Updated 8 years ago
- Automated YARA rule generation from the Cert Central compromised certificate database.☆16Updated this week
- Deploy open-source AI quickly and easily - Special Bonus Offer • AdRunpod Hub is built for open source. One-click deployment and autoscaling endpoints without provisioning your own infrastructure.
- Manage and maintain Defender XDR custom collection configuration☆41Nov 19, 2025Updated 11 months ago
- Professional Phishing Awareness & Cybersecurity Education Platform☆26Oct 17, 2025Updated last year
- Segugio allows the execution and tracking of critical steps in the malware detonation process, from clicking on the first stage to extrac…☆151Sep 21, 2024Updated 2 years ago
- ☆17Jul 10, 2026Updated 3 months ago
- A HTTP bot in Java with basic commands and ability's☆10Aug 20, 2015Updated 11 years ago
- .NET tool used to enrich RPC telemetry☆102Jan 24, 2026Updated 9 months ago
- CAPE core and community parsers☆20Oct 19, 2026Updated last week