grierforensics / officedissector
Static analysis tools for Microsoft Office Open XML files and documents
☆68Updated 7 years ago
Alternatives and similar repositories for officedissector:
Users that are interested in officedissector are comparing it to the libraries listed below
- Python IOC Editor☆62Updated 10 years ago
- ☆82Updated 8 years ago
- Checks with NSRL RDS servers looking for for hash matches☆114Updated 4 years ago
- Modified edition of cuckoo community modules☆50Updated 7 years ago
- A Windows Event Processing Utility☆46Updated 7 years ago
- ☆36Updated 8 years ago
- An ICAP Server with yara scanner for URL and content.☆59Updated 4 months ago
- Python tool and library to help analyze files during malware triage and analysis.☆78Updated 4 years ago
- A dumb set of scripts for building a cuckoo rig☆61Updated 8 years ago
- A warehouse for your malware☆134Updated 11 years ago
- Python tools for IOC (Indicator of Compromise) handling☆96Updated 3 years ago
- Various public documents, whitepapers and articles about APT campaigns☆54Updated 9 years ago
- Scripts for dealing with various ek's☆69Updated 8 years ago
- Create an entire YARA rule via Python? Whhhhhhaatttt?☆74Updated 6 years ago
- openioc_scan Volatility Framework plugin☆43Updated 9 years ago
- A Rekall interactive document for a Memory Analysis workshop/course.☆43Updated 8 years ago
- Command line tool for scanning streams within office documents plus xor db attack☆126Updated last year
- Parse Windows Prefetch files: Supports XP - Windows 10 Prefetch files☆117Updated 10 months ago
- Manage VT Alerts☆62Updated 8 years ago
- Process HTTP Pcaps With YARA☆102Updated 11 years ago
- Some dfir stuff☆31Updated 3 years ago
- Modified edition of cuckoo community modules☆32Updated 5 years ago
- A Yara rule generator for finding related samples and hunting☆158Updated 2 years ago
- Various Modules & Scripts for use with Viper Framework☆27Updated 5 years ago
- Malware Repository Framework☆99Updated 7 years ago
- Yara is awesome, but sometimes you need to manipulate the data streams you're scanning in different ways.☆97Updated 10 years ago
- stoQ Public Plugins☆71Updated 2 years ago
- Some IR notes☆73Updated 8 years ago
- Automation for VirusTotal☆31Updated 8 years ago
- Generate a Yara rule to find base64-encoded files containg a specific keyword☆40Updated 6 years ago