grierforensics / officedissector
Static analysis tools for Microsoft Office Open XML files and documents
☆68Updated 7 years ago
Alternatives and similar repositories for officedissector:
Users that are interested in officedissector are comparing it to the libraries listed below
- A Rekall interactive document for a Memory Analysis workshop/course.☆43Updated 7 years ago
- A dumb set of scripts for building a cuckoo rig☆61Updated 7 years ago
- Scripts for dealing with various ek's☆69Updated 7 years ago
- ☆82Updated 8 years ago
- Parse Windows Prefetch files: Supports XP - Windows 10 Prefetch files☆115Updated 8 months ago
- openioc_scan Volatility Framework plugin☆42Updated 8 years ago
- A Yara rule generator for finding related samples and hunting☆157Updated 2 years ago
- Some IR notes☆73Updated 8 years ago
- A warehouse for your malware☆134Updated 11 years ago
- Checks with NSRL RDS servers looking for for hash matches☆111Updated 3 years ago
- A Windows Event Processing Utility☆46Updated 6 years ago
- Yara is awesome, but sometimes you need to manipulate the data streams you're scanning in different ways.☆97Updated 10 years ago
- PE Import Hash Generator☆75Updated 7 years ago
- Python IOC Editor☆62Updated 9 years ago
- Modified edition of cuckoo community modules☆32Updated 5 years ago
- Lazy Office Analyzer☆119Updated 7 years ago
- Python tools for IOC (Indicator of Compromise) handling☆96Updated 3 years ago
- Application for STIX v2.0 objects management and analysis☆27Updated 7 years ago
- ☆36Updated 7 years ago
- Mystique may be used to discover infection markers that can be used to vaccinate endpoints against malware. It receives as input a malici…☆81Updated 7 years ago
- Pure Python parser for Application Compatibility Shim Databases (.sdb files)☆108Updated 4 years ago
- Sample staging & detonation utility to be used in combination with Cuckoo Sandbox.☆82Updated last year
- Automation for VirusTotal☆31Updated 8 years ago
- Modified edition of cuckoo community modules☆50Updated 7 years ago
- Utility to retrieve the Master File Table (MFT) from a live running NTFS volume and send it to a netcat listener.☆40Updated 10 years ago
- stoQ Public Plugins☆71Updated last year
- Generate a Yara rule to find base64-encoded files containg a specific keyword☆40Updated 6 years ago
- Recurse through a registry, identifying values with large data -- a registry malware hunter☆44Updated 8 years ago
- Process HTTP Pcaps With YARA☆101Updated 11 years ago
- Command line tool for scanning streams within office documents plus xor db attack☆126Updated last year