kevoreilly / CAPEv2
Malware Configuration And Payload Extraction
☆2,109Updated this week
Alternatives and similar repositories for CAPEv2:
Users that are interested in CAPEv2 are comparing it to the libraries listed below
- DRAKVUF Sandbox - automated hypervisor-level malware analysis system☆1,084Updated last month
- yarGen is a generator for YARA rules☆1,586Updated 7 months ago
- YARA signature and IOC database for my scanners and tools☆2,525Updated last month
- FakeNet-NG - Next Generation Dynamic Network Analysis Tool☆1,834Updated last month
- Cuckoo3 is a Python 3 open source automated malware analysis system.☆662Updated 3 weeks ago
- A curated list of awesome YARA rules, tools, and people.☆3,646Updated 2 months ago
- Indicators of Compromises (IOC) of our various investigations☆1,712Updated last month
- Malware samples, analysis exercises and other interesting resources.☆1,498Updated last year
- Malwoverview is a first response tool used for threat hunting and offers intel information from Virus Total, Hybrid Analysis, URLHaus, Po…☆3,070Updated last month
- FLARE Obfuscated String Solver - Automatically extract obfuscated strings from malware.☆3,376Updated this week
- An Active Defense and EDR software to empower Blue Teams☆1,249Updated last year
- ReversingLabs YARA Rules☆780Updated last month
- Windows Events Attack Samples☆2,286Updated last year
- Digging Deeper....☆3,058Updated this week
- A repository of sysmon configuration modules☆2,700Updated 4 months ago
- An open library of adversary emulation plans designed to empower organizations to test their defenses based on real-world TTPs.☆1,774Updated last year
- Noriben - Portable, Simple, Malware Analysis Sandbox☆1,136Updated last year
- Rapidly Search and Hunt through Windows Forensic Artefacts☆2,996Updated 2 weeks ago
- A toolset to make a system look as if it was the victim of an APT attack☆2,497Updated last year
- Standard collection of rules for capa: the tool for enumerating the capabilities of programs☆556Updated this week
- The multi-platform memory acquisition tool.☆719Updated last month
- Scans all running processes. Recognizes and dumps a variety of potentially malicious implants (replaced/implanted PEs, shellcodes, hooks,…☆2,085Updated 2 weeks ago
- APT-Hunter is Threat Hunting tool for windows event logs which made by purple team mindset to provide detect APT movements hidden in the …☆1,277Updated 2 months ago
- Open Source EDR for Windows☆1,168Updated last year
- Volatility 3.0 development☆2,822Updated this week
- ☆2,217Updated last year
- Real Intelligence Threat Analytics (RITA) is a framework for detecting command and control communication through network traffic analysis…☆2,507Updated 6 months ago
- Loki - Simple IOC and YARA Scanner☆3,444Updated last month
- A list of cyber-chef recipes and curated links☆2,049Updated 7 months ago
- Scans a given process. Recognizes and dumps a variety of potentially malicious implants (replaced/injected PEs, shellcodes, hooks, in-mem…☆3,183Updated last month