hiddenillusion / AnalyzePDF

Related projects: ⓘ

• 504ensicsLabs / DAMM
  Differential Analysis of Malware in Memory
  ☆209Updated 7 years ago
• tomchop / unxor
  unXOR will search a XORed file and try to guess the key using known-plaintext attacks.
  ☆141Updated 4 years ago
• tylabs / qs_old
  Command line tool for scanning streams within office documents plus xor db attack
  ☆125Updated 11 months ago
• KasperskyLab / ForensicsTools
  Tools for DFIR
  ☆116Updated 6 years ago
• OMENScan / AChoir
  Windows Live Artifacts Acquisition Script
  ☆181Updated 2 years ago
• sroberts / malwarehouse
  A warehouse for your malware
  ☆131Updated 11 years ago
• Neo23x0 / ImpHash-Generator
  PE Import Hash Generator
  ☆72Updated 7 years ago
• michael-yip / MaltegoVT
  A set of Maltego transforms for VirusTotal Public API v2.0. This set has the added functionality of caching queries on a daily basis to s…
  ☆77Updated 8 years ago
• MinervaLabsResearch / Mystique
  Mystique may be used to discover infection markers that can be used to vaccinate endpoints against malware. It receives as input a malici…
  ☆80Updated 6 years ago
• PoorBillionaire / Windows-Prefetch-Parser
  Parse Windows Prefetch files: Supports XP - Windows 10 Prefetch files
  ☆111Updated 3 months ago
• idiom / pftriage
  Python tool and library to help analyze files during malware triage and analysis.
  ☆77Updated 4 years ago
• williballenthin / EVTXtract
  EVTXtract recovers and reconstructs fragments of EVTX log files from raw binary data, including unallocated space and memory images.
  ☆180Updated 4 years ago
• fireeye / tools
  general purpose and malware specific analysis tools
  ☆97Updated 8 years ago
• opensourcesec / CIRTKit
  Tools for the Computer Incident Response Team
  ☆141Updated 7 years ago
• H2Cyber / VolDiff
  VolDiff: Malware Memory Footprint Analysis based on Volatility
  ☆192Updated 7 years ago
• phage-nz / infosec-bazaar
  A collection of infosec related scripts and information.
  ☆53Updated last week
• woanware / usbdeviceforensics
  Python script for extracting USB information from Windows registry hives
  ☆124Updated 5 years ago
• JohnLaTwC / PyPowerShellXray
  Python script to decode common encoded PowerShell scripts
  ☆214Updated 6 years ago
• sapphirex00 / Threat-Hunting
  Personal compilation of APT malware from whitepaper releases, documents and own research
  ☆253Updated 5 years ago
• Tigzy / malware-repo
  Malware Repository Framework
  ☆99Updated 6 years ago
• sans-dfir / sift-files
  ☆64Updated this week
• mandiant / Volatility-Plugins
  ☆82Updated 8 years ago
• jipegit / IRNotes
  Some IR notes
  ☆73Updated 8 years ago
• robbyFux / Ragpicker
  Ragpicker is a Plugin based malware crawler with pre-analysis and reporting functionalities. Use this tool if you are testing antivirus p…
  ☆92Updated 9 years ago
• JamesHabben / evolve
  Web interface for the Volatility Memory Forensics Framework
  ☆259Updated 6 years ago
• matonis / page_brute
  Page File analysis tools.
  ☆124Updated 8 years ago
• Silv3rHorn / ArtifactExtractor
  Extract common Windows artifacts from source images and VSCs
  ☆65Updated 3 years ago
• mkorman90 / VolatilityBot
  VolatilityBot – An automated memory analyzer for malware samples and memory dumps
  ☆263Updated 3 years ago
• mandiant / AuditParser
  AuditParser
  ☆58Updated 11 years ago
• abhinavbom / Threat-Intelligence-Hunter
  TIH is an intelligence tool that helps you in searching for IOCs across multiple openly available security feeds and some well known APIs…
  ☆148Updated 4 months ago