Analysis of file (doc, pdf, exe, ...) in deep (emmbedded file(s)) with clamscan and yara rules
☆51Sep 6, 2023Updated 3 years ago
Alternatives and similar repositories for static_file_analysis
Users that are interested in static_file_analysis are comparing it to the libraries listed below. We may earn a commission when you buy through links labeled 'Ad' on this page.
Sorting:
- Run YARA rules on process memory and execute Python scripts on matches☆13May 15, 2018Updated 8 years ago
- My logstash plugins. Filter: sig (for security detect -> IOC, sig, New value, Reference, link, frequence, ...). Output: alert created by …☆10Jul 26, 2019Updated 7 years ago
- CLI tool for testing Office documents with macros using MaliciousMacroBot☆12Dec 3, 2023Updated 2 years ago
- Create an entire YARA rule via Python? Whhhhhhaatttt?☆73Jan 12, 2019Updated 7 years ago
- A feature extension to ease the automation of Threat Hunting with ElastAlert and the ELK Stack☆14Jan 11, 2018Updated 8 years ago
- Managed hosting for WordPress and PHP on Cloudways • AdManaged hosting for WordPress, Magento, Laravel, or PHP apps, on multiple cloud providers. Deploy in minutes on Cloudways by DigitalOcean.
- ☆16Sep 26, 2022Updated 4 years ago
- snake-core - the real snake☆15Jul 11, 2023Updated 3 years ago
- Compressed Rich Text Format (RTF) compression and decompression in Python☆25Jun 29, 2025Updated last year
- Handy scripts to speed up malware analysis☆35Oct 3, 2023Updated 3 years ago
- Python 3 library to build YARA rules.☆14Oct 24, 2021Updated 5 years ago
- Work Fast With the pattern matching swiss knife for malware researchers.☆38Mar 26, 2016Updated 10 years ago
- nfsinkhole is a Python library and scripts for setting up a Linux server as a sinkhole (monitor, log/capture, and drop all traffic to a s…☆12Apr 8, 2017Updated 9 years ago
- Kibana 6 Templates for Suricata IDPS Threat Hunting☆24Mar 5, 2019Updated 7 years ago
- ☆13Feb 5, 2025Updated last year
- Managed hosting for WordPress and PHP on Cloudways • AdManaged hosting for WordPress, Magento, Laravel, or PHP apps, on multiple cloud providers. Deploy in minutes on Cloudways by DigitalOcean.
- This Script will walk you through creating elastalert rules☆11Dec 18, 2018Updated 7 years ago
- ☆100Oct 7, 2020Updated 6 years ago
- Cheat-Sheet with events too look out for when analysing malicious Office documents☆19Oct 21, 2017Updated 9 years ago
- xlrd2 is a variant of xlrd that is actively maintained☆23Aug 1, 2024Updated 2 years ago
- Django web interface for managing Yara rules☆195Jul 28, 2018Updated 8 years ago
- Golang parser for OLE files☆33Dec 4, 2025Updated 10 months ago
- Generating YARA rules based on binary code☆220Oct 7, 2021Updated 5 years ago
- A mapping of used malware names to commonly known family names☆65Feb 21, 2023Updated 3 years ago
- This directory contains random scripts from threat hunting or malware research☆11Feb 15, 2018Updated 8 years ago
- Simple, predictable pricing with DigitalOcean hosting • AdAlways know what you'll pay with monthly caps and flat pricing. Enterprise-grade infrastructure trusted by 600k+ customers.
- Parse YARA rules and operate over them more easily.☆195Feb 6, 2025Updated last year
- Create dataset for suricata with indicators of MISP instances and add sightings in MISP if an indicator of dataset generates an alert☆37Nov 9, 2022Updated 3 years ago
- Event Log Analysis Tools☆31Sep 27, 2016Updated 10 years ago
- This repository contains advanced threat hunting scripts for Cisco Secure Endpoint API. The scripts leverage the AMP API to hunt for thre…☆14Apr 21, 2026Updated 6 months ago
- Find abuse contacts for observables☆69Nov 10, 2022Updated 3 years ago
- A set of YARA rules for the AIL framework to detect leak or information disclosure☆46Jan 31, 2025Updated last year
- Generate a Yara rule to find base64-encoded files containg a specific keyword☆40Jul 13, 2018Updated 8 years ago
- Distributed malware processing framework based on Python, Redis and S3.☆479Oct 23, 2026Updated last week
- A set of public Yara rules☆11Apr 29, 2019Updated 7 years ago
- Managed hosting for WordPress and PHP on Cloudways • AdManaged hosting for WordPress, Magento, Laravel, or PHP apps, on multiple cloud providers. Deploy in minutes on Cloudways by DigitalOcean.
- Real-time Packet Observation Tool☆39Sep 26, 2023Updated 3 years ago
- Collection of scripts used to analyse malware or emails☆20Oct 6, 2020Updated 6 years ago
- D-Scan project for office document analysis and generating flow diagram of macro in documents. For demo visit☆29Jan 10, 2026Updated 9 months ago
- Rules Shared by the Community from 100 Days of YARA 2023☆79Apr 12, 2023Updated 3 years ago
- Lightweight Microsoft OLE file parser in pure Python☆20Oct 17, 2019Updated 7 years ago
- This library provides functionality for fetching and parsing information about Common Vulnerabilities and Exposures (CVE) using the NIST …☆14May 11, 2023Updated 3 years ago
- Unpack MIME attachments from a file and check them against virustotal.com☆44Mar 11, 2016Updated 10 years ago