mandiant / capa
The FLARE team's open-source tool to identify capabilities in executable files.
☆4,879Updated this week
Related projects ⓘ
Alternatives and complementary repositories for capa
- Malwoverview is a first response tool used for threat hunting and offers intel information from Virus Total, Hybrid Analysis, URLHaus, Po…☆2,969Updated last week
- A collection of software installations scripts for Windows systems that allows you to easily setup and maintain a reverse engineering env…☆6,593Updated 2 weeks ago
- Small and highly portable detection tests based on MITRE's ATT&CK.☆9,791Updated this week
- Living Off The Land Binaries And Scripts - (LOLBins and LOLScripts)☆7,105Updated last week
- FLARE Obfuscated String Solver - Automatically extract obfuscated strings from malware.☆3,264Updated this week
- A curated list of awesome YARA rules, tools, and people.☆3,565Updated this week
- Malware Configuration And Payload Extraction☆2,011Updated this week
- Red Teaming Tactics and Techniques☆4,065Updated 2 months ago
- Automated Adversary Emulation Platform☆5,660Updated this week
- Complete Mandiant Offensive VM (Commando VM), a fully customizable Windows-based pentesting virtual machine distribution. commandovm@mand…☆6,967Updated last month
- APT & CyberCriminal Campaign Collection☆3,724Updated 3 months ago
- Interesting APT Report Collection And Some Special IOC☆2,439Updated this week
- YARA signature and IOC database for my scanners and tools☆2,486Updated this week
- The pattern matching swiss knife☆8,306Updated last month
- Automate the creation of a lab environment complete with security tooling and logging best practices☆4,648Updated 4 months ago
- Loki - Simple IOC and YARA Scanner☆3,402Updated 3 weeks ago
- FakeNet-NG - Next Generation Dynamic Network Analysis Tool☆1,804Updated this week
- Open Cyber Threat Intelligence Platform☆6,421Updated this week
- Rapidly Search and Hunt through Windows Forensic Artefacts☆2,877Updated last week
- MISP (core software) - Open Source Threat Intelligence and Sharing Platform☆5,393Updated this week
- Adversary Emulation Framework☆8,553Updated last week
- A cheat sheet that contains common enumeration and attack methods for Windows Active Directory.☆5,678Updated last month
- Attack and defend active directory using modern post exploitation adversary tradecraft activity☆4,422Updated 2 weeks ago
- Automation for internal Windows Penetrationtest / AD-Security☆3,337Updated 9 months ago
- Main Sigma Rule Repository☆8,374Updated this week
- Repository of yara rules☆4,180Updated 7 months ago
- A swiss army knife for pentesting networks☆8,457Updated 11 months ago
- oletools - python tools to analyze MS OLE2 files (Structured Storage, Compound File Binary Format) and MS Office documents, for malware a…☆2,924Updated 4 months ago
- Wiki to collect Red Team infrastructure hardening resources☆4,152Updated 7 months ago
- Defeating Windows User Account Control☆6,388Updated 3 months ago