Generate YARA rules for OOXML documents.
☆38Jun 1, 2023Updated 3 years ago
Alternatives and similar repositories for apooxml
Users that are interested in apooxml are comparing it to the libraries listed below. We may earn a commission when you buy through links labeled 'Ad' on this page.
Sorting:
- A tool to help malware analysts signature unique parts of RTF documents☆29Jan 5, 2026Updated 9 months ago
- DNS logging, detection, ...☆15Mar 5, 2022Updated 4 years ago
- a collection of yara rules for binary analysis☆24Aug 24, 2017Updated 9 years ago
- Yara Rules for Modern Malware☆81Mar 3, 2024Updated 2 years ago
- Automatically create YARA rules from malicious documents.☆210May 16, 2022Updated 4 years ago
- End-to-end encrypted email - Proton Mail • AdSpecial offer: 40% Off Yearly / 80% Off First Month. All Proton services are open source and independently audited for security.
- ☆24Dec 15, 2022Updated 3 years ago
- C2 Active Scanner☆59Jun 19, 2024Updated 2 years ago
- Generate YARA rules from Windows API hashes for malware detection and hunting.☆17Aug 11, 2026Updated 2 months ago
- A high-performance TAXII (Trusted Automated eXchange of Indicator Information) server written in Rust.☆11Feb 7, 2026Updated 8 months ago
- Collection of my own detection rules☆20Oct 21, 2026Updated last week
- Exploits for YARA 3.7.1 & 3.8.1☆36Dec 20, 2018Updated 7 years ago
- A collection of Cortex Analyzers and Responders for TheHive/Cortex☆13Jan 29, 2020Updated 6 years ago
- A list of JARM hashes for different ssl implementations used by some C2/red team tools.☆144Apr 20, 2023Updated 3 years ago
- Community modules for FAME☆65Oct 23, 2026Updated last week
- Deploy on Railway without the complexity - Free Credits Offer • AdConnect your repo and Railway handles the rest with instant previews. Quickly provision container image services, databases, and storage volumes.
- Repository documenting how Threat Intelligence and / or a Threat Intelligence Platform can prove its value to an organisation.☆54Oct 23, 2024Updated 2 years ago
- IcedID Decryption Tool☆27May 7, 2021Updated 5 years ago
- Registry timestamp manipulation☆17Feb 26, 2014Updated 12 years ago
- Generate representative samples from Pwned Passwords (HIBP)☆11Jan 6, 2022Updated 4 years ago
- This is a python tool aiming to make using TheHive webhooks easier.☆28Oct 23, 2020Updated 6 years ago
- Minimal Indicator Storage System☆12Feb 8, 2021Updated 5 years ago
- \ PowerAvails Powershell /☆10Jun 30, 2018Updated 8 years ago
- FLARE floss applied to all unpacked+dumped samples in Malpedia, pre-processed for further use.☆87Jan 6, 2026Updated 9 months ago
- The mission of Black Lotus Labs is to leverage our network visibility to both help protect customers and keep the internet clean.☆13Jun 18, 2021Updated 5 years ago
- Proton VPN Special Offer - Get 70% off • AdSpecial partner offer. Trusted by over 100 million users worldwide. Tested, Approved and Recommended by Experts.
- A self-verifying autonomous DFIR analyst: read-only MCP forensic tools plus an adversarial Investigator/Skeptic self-correction loop.☆27Jun 10, 2026Updated 4 months ago
- A curated list of awesome things related to TheHive & Cortex☆184Oct 9, 2021Updated 5 years ago
- A repository containing the research output from my GCFE Gold Paper which compared Windows 10 and Windows 11.☆27Jul 27, 2022Updated 4 years ago
- Communicate with a remote shell easily☆12Dec 10, 2017Updated 8 years ago
- C# Implementation of Jared Atkinson's Get-InjectedThread.ps1☆56Jul 11, 2021Updated 5 years ago
- Run Sigma detection rules on logs from the new MacOS EndpointSecurity Framework☆22Jan 22, 2021Updated 5 years ago
- ☆36Jan 11, 2023Updated 3 years ago
- Prevention-focused living-off-the-land testing framework mapped to MITRE ATT&CK.☆30Jul 24, 2026Updated 3 months ago
- A powershell parser for https://github.com/ufrisk/MemProcFS☆45May 12, 2021Updated 5 years ago
- AI Agents on DigitalOcean Gradient AI Platform • AdBuild production-ready AI agents using customizable tools or access multiple LLMs through a single endpoint. Create custom knowledge bases or connect external data.
- [LEGACY] Git-based Windows filesystem capture from the pre-neogit OSWatcher. Superseded, see OSWatcher/oswatcher☆77Aug 23, 2026Updated 2 months ago
- BinSequencer is a script designed to find a common pattern of bytes within a set of samples and generate a YARA rule from the identified…☆79Jan 2, 2022Updated 4 years ago
- Primary data pipelines for intrusion detection, security analytics and threat hunting☆85Jan 9, 2022Updated 4 years ago
- Simple PowerShell script to enable process scanning with Yara.☆101Oct 4, 2022Updated 4 years ago
- Alternative YARA scanning engine☆72Aug 23, 2022Updated 4 years ago
- A simple proof of concept for detecting use of Cobalt Strike's execute-assembly☆59Apr 1, 2022Updated 4 years ago
- Quick and dirty fix to OLE2 executing code via .hta☆13Apr 24, 2017Updated 9 years ago