herosi / triage-collectorLinks
☆23Updated last year
Alternatives and similar repositories for triage-collector
Users that are interested in triage-collector are comparing it to the libraries listed below
Sorting:
- ☆36Updated 3 years ago
- Imphash-like calculation on Golang binaries☆49Updated 3 years ago
- 100 Days of YARA to be updated with rules & ideas as the year progresses☆60Updated 2 years ago
- ☆33Updated 3 years ago
- ETW forensic tool for Volatility3 plugin☆17Updated last year
- Modular malware analysis artifact collection and correlation framework☆53Updated last year
- ☆15Updated 4 years ago
- ShellSweeping the evil.☆53Updated last year
- Lazarus analysis tools and research report☆57Updated 2 years ago
- A powershell parser for https://github.com/ufrisk/MemProcFS☆45Updated 4 years ago
- A set of tools for collecting forensic information☆27Updated 5 years ago
- Scripts, Yara rules and other files developed during malware investigations☆26Updated 3 years ago
- Browse Windows Prefetch versions: 17,23,26,30v1/2,31 & some of SuperFetch .7db/.db's☆62Updated last year
- Documentation and parsers for different anti-virus quarantine formats.☆42Updated 5 years ago
- Yara Rules for Modern Malware☆78Updated last year
- Collection of generic YARA rules☆16Updated 4 months ago
- A multi-threaded malware sample downloader based upon given MD-5/SHA-1/SHA-256 hashes, using multiple malware databases.☆30Updated 2 years ago
- NTFS Security Descriptor Stream ($Secure:$SDS) parser☆14Updated 3 years ago
- Alternative YARA scanning engine☆73Updated 3 years ago
- A collection of my yara rules☆34Updated 2 years ago
- JPCERT/CC public YARA rules repository☆110Updated 2 months ago
- This script will generate hashes (MD5, SHA1, SHA256), submit the MD5 to Virus Total, and produce a text file with the results.☆15Updated 2 years ago
- Accelerating the collection, processing, analysis and outputting of digital forensic artefacts.☆32Updated last month
- Generates YARA rules to detect malware using API hashing☆17Updated 4 years ago
- Reads and prints information from the website MalAPI.io☆20Updated 3 years ago
- Python based CLI for MalwareBazaar☆39Updated 5 months ago
- Quick analysis focusing on most important of a Malware or a Threat☆41Updated 2 years ago
- A proof-of-concept re-assembler for reverse VNC traffic.☆24Updated 2 years ago
- Signature-based detection of malware features based on Windows API call sequences. It's like YARA for sandbox API traces!☆82Updated 2 years ago
- Scripts and tools accompanying HP Threat Research blog posts and reports.☆50Updated last year