kevoreilly / capemon
capemon: CAPE's monitor
☆116Updated this week
Alternatives and similar repositories for capemon:
Users that are interested in capemon are comparing it to the libraries listed below
- Native Python3 bindings for @horsicq's Detect-It-Easy☆64Updated last month
- Use YARA rules on Time Travel Debugging traces☆89Updated last year
- ☆105Updated last year
- A tool that automates regex generation for the x86 and x86-64 instruction sets☆70Updated last year
- IDA Pro plugin for recognizing known hashes of API function names☆81Updated 2 years ago
- IDA python plugin to scan binary with Yara rules☆172Updated last year
- Community modules for CAPE Sandbox☆95Updated this week
- MalUnpack companion driver☆98Updated 10 months ago
- The FLARE team's open-source library to disassemble Common Intermediate Language (CIL) instructions.☆164Updated 2 weeks ago
- Symbol hash for ELF files☆109Updated 3 years ago
- BluePill: Neutralizing Anti-Analysis Behavior in Malware Dissection (Black Hat Europe 2019, IEEE TIFS 2020)☆125Updated 3 years ago
- Parse .NET executable files.☆76Updated 2 months ago
- Small tool to convert beteween the PE alignments (raw and virtual).☆87Updated 2 years ago
- Generating YARA rules based on binary code☆208Updated 3 years ago
- Sysmon-Like research tool for ETW☆354Updated 2 years ago
- GarbageMan is a set of tools for analyzing .NET binaries through heap analysis.☆114Updated 2 years ago
- A DTrace on Windows Reimplementation☆343Updated 2 months ago
- Powershell script deobfuscation using AST in Python☆65Updated last year
- Automatically generate AV byte signatures from sets of similar binaries.☆269Updated 4 months ago
- Hyper-V Research is trendy now☆178Updated 11 months ago
- Robust Automated Malware Unpacker☆84Updated last year
- The MinHash-based Code Relationship & Investigation Toolkit (MCRIT) is a framework created to simplify the application of the MinHash alg…☆91Updated last month
- FLARE Team's Binary Navigator☆251Updated 2 weeks ago
- This project aims at simplifying Windows API import recovery on arbitrary memory dumps☆249Updated 2 years ago
- Set of antianalysis techniques found in malware☆132Updated last year
- HashDB API hash lookup plugin for IDA Pro☆311Updated 6 months ago
- Automatic YARA rule generation for Malpedia☆159Updated 2 years ago
- Simple windows API logger☆101Updated 5 years ago
- Malware Configuration Extraction Modules☆49Updated last year
- ☆101Updated 2 years ago