libyal / assortedLinks
Assorted documentation, scripts and tools
☆34Updated 10 months ago
Alternatives and similar repositories for assorted
Users that are interested in assorted are comparing it to the libraries listed below
Sorting:
- ☆32Updated last year
- Pure Python parser for data encoded by .NET's BinaryFormatter☆50Updated 6 years ago
- ☆13Updated 9 years ago
- Library and tools to access the Windows Event Log (EVT) format☆60Updated last year
- Cockroach is your primitive & immortal swiss army knife.☆49Updated 3 years ago
- pyGoRE - Python library for analyzing Go binaries☆64Updated 3 years ago
- ☆47Updated 5 years ago
- A python script that can be used to scan data within in an IDB using Yara.☆23Updated 6 years ago
- Emu-strings project - JScript/VBScript automated dropper analysis system☆18Updated 4 years ago
- Scripts and tools created for appx analysis talk (Magnet summit 2019)☆16Updated last year
- bunch of random stuff☆21Updated 5 years ago
- a collection of yara rules for binary analysis☆24Updated 7 years ago
- ☆52Updated 6 years ago
- Volatility memory forensics plugin for extracting Windows DNS Cache☆29Updated 8 years ago
- Print the strings of encoded printable characters in files☆12Updated 10 years ago
- Work Fast With the pattern matching swiss knife for malware researchers.☆38Updated 9 years ago
- ☆43Updated 5 years ago
- DeepToad is a library and a tool to clusterize similar files using fuzzy hashing☆20Updated 5 years ago
- pure Python binary analysis framework☆23Updated 6 years ago
- NTFS parser, plus linking capabilites between MFT LogFile and UsnJrnl☆37Updated 8 years ago
- Public documents about bachelor thesis "Reverse Engineering Analysis of the NDIS 6.* stack"☆41Updated 9 years ago
- Royal APT - APT15 - Related Information from NCC Group Cyber Defense Operations Research☆53Updated 7 years ago
- Tool to decompress data from Windows 10 page files and memory dumps, that has been compressed by the Windows 10 memory manager.☆51Updated 6 years ago
- Recover event log entries from an image by heurisitically looking for record structures.☆27Updated 9 years ago
- simple plugin to detect shellcode on Bro IDS with Unicorn☆33Updated 8 years ago
- Transfer EIP control to shellcode during malware analysis investigation☆76Updated 10 years ago
- Windows link file (shortcuts) examiner☆68Updated last year
- Parse Microsoft shim databases☆30Updated 7 months ago
- Linux-KVM with rVMI extensions☆22Updated 7 years ago
- Yara syntax highlighting☆25Updated 3 years ago