kevoreilly / CAPEv2
Malware Configuration And Payload Extraction
☆2,347Updated this week
Alternatives and similar repositories for CAPEv2:
Users that are interested in CAPEv2 are comparing it to the libraries listed below
- YARA signature and IOC database for my scanners and tools☆2,596Updated this week
- DRAKVUF Sandbox - automated hypervisor-level malware analysis system☆1,119Updated this week
- FakeNet-NG - Next Generation Dynamic Network Analysis Tool☆1,894Updated last week
- yarGen is a generator for YARA rules☆1,626Updated last week
- A curated list of awesome YARA rules, tools, and people.☆3,772Updated 3 weeks ago
- FLARE Obfuscated String Solver - Automatically extract obfuscated strings from malware.☆3,503Updated this week
- An open library of adversary emulation plans designed to empower organizations to test their defenses based on real-world TTPs.☆1,866Updated last year
- Malware samples, analysis exercises and other interesting resources.☆1,543Updated last year
- ReversingLabs YARA Rules☆814Updated last week
- Malwoverview is a first response tool used for threat hunting and offers intel information from Virus Total, Hybrid Analysis, URLHaus, Po…☆3,164Updated 2 months ago
- Indicators of Compromises (IOC) of our various investigations☆1,754Updated 3 weeks ago
- Volatility 3.0 development☆3,021Updated this week
- Windows Events Attack Samples☆2,340Updated 2 years ago
- Digging Deeper....☆3,195Updated this week
- Cuckoo3 is a Python 3 open source automated malware analysis system.☆702Updated last month
- A toolset to make a system look as if it was the victim of an APT attack☆2,568Updated last year
- An Active Defense and EDR software to empower Blue Teams☆1,271Updated last year
- Loki - Simple IOC and YARA Scanner☆3,516Updated 4 months ago
- Real Intelligence Threat Analytics (RITA) is a framework for detecting command and control communication through network traffic analysis…☆2,508Updated 9 months ago
- ☆2,267Updated last year
- Noriben - Portable, Simple, Malware Analysis Sandbox☆1,149Updated last year
- Scans all running processes. Recognizes and dumps a variety of potentially malicious implants (replaced/implanted PEs, shellcodes, hooks,…☆2,145Updated 3 weeks ago
- Re-play Security Events☆1,635Updated last year
- Standard collection of rules for capa: the tool for enumerating the capabilities of programs☆573Updated 3 weeks ago
- A repository of sysmon configuration modules☆2,763Updated 7 months ago
- Detect Tactics, Techniques & Combat Threats☆2,141Updated 2 months ago
- Repository of yara rules☆4,362Updated last year
- A list of cyber-chef recipes and curated links☆2,073Updated 10 months ago
- Scans a given process. Recognizes and dumps a variety of potentially malicious implants (replaced/injected PEs, shellcodes, hooks, in-mem…☆3,275Updated this week
- The FLARE team's open-source tool to identify capabilities in executable files.☆5,269Updated this week