scrapbird / sinkholed

Related projects ⓘ

Alternatives and complementary repositories for sinkholed

• colincowie / viper-plugins
  Plugins for the Viper Framework
  ☆14Updated 5 years ago
• arieljt / VTCodeBlocks-Maltego
  Maltego transforms to pivot between PE files based on their VirusTotal codeblocks
  ☆18Updated 3 years ago
• alexander-hanel / gopep
  Go Lang Portable Executable Parser
  ☆37Updated 3 years ago
• Tera0017 / TAFOF-Unpacker
  TA505 unpacker Python 2.7
  ☆46Updated 4 years ago
• schrodyn / steezy
  Steezy - Ghetto Yara Generation
  ☆15Updated last year
• proferosec / Threat-Intelligence
  A collection of threat intelligence data such as IOC, Yara and Snort/Suricata Rules etc.
  ☆10Updated 5 years ago
• GelosSnake / MalwareResearchAPI
  API functions for Malware Research
  ☆35Updated 5 years ago
• intezer / analyze-scripts
  ☆26Updated last year
• alexander-hanel / hansel
  Hansel - a simple but flexible search for IDA
  ☆26Updated 5 years ago
• Dump-GUY / CAPA_JsonConver
  Converts exported results of CAPA tool from .json format to another formats supporting by different tools.
  ☆21Updated 2 years ago
• DissectMalware / MalwareCMDMonitor
  Shows command lines used by latest instances analyzed on Hybrid-Analysis
  ☆43Updated 6 years ago
• BitsOfBinary / yarabuilder
  Python 3 library to build YARA rules.
  ☆13Updated 3 years ago
• jacobsoo / DDE-Extractor
  This script is used for extracting DDE in docx and xlsx
  ☆12Updated 6 years ago
• carlpulley / volatility
  A collection of Volatility Framework plugins.
  ☆26Updated 11 years ago
• re-fox / documentation
  ☆13Updated 3 years ago
• cryptogramfan / Malware-Analysis-Scripts
  Handy scripts to speed up malware analysis
  ☆35Updated last year
• seth1002 / tracecorn_tina
  a modified version base on Tracecorn
  ☆20Updated 5 years ago
• herrcore / aplib-ripper
  Use this library to automatically extract PE files compressed with aplib from a binary blob.
  ☆32Updated 5 years ago
• silascutler / IDA_AutoAnalysis
  IDA Pro plugin that rename functions on load, based on functionality
  ☆19Updated 6 years ago
• archcloudlabs / r2elk
  Radare2 Metadata Extraction to Elasticsearch
  ☆21Updated 5 months ago
• silascutler / DetuxNG
  The Multiplatform Linux Sandbox
  ☆15Updated 10 months ago
• JR0driguezB / malware_analysis
  Various snippets created during malware analysis
  ☆22Updated 6 years ago
• ruppde / yara_rules
  Yara rules
  ☆19Updated last year
• mauronz / binja-emotet
  ☆18Updated 4 years ago
• PwCUK-CTO / rtfsig
  A tool to help malware analysts signature unique parts of RTF documents
  ☆29Updated 9 months ago
• mandiant / rvmi-qemu
  QEMU with rVMI extensions
  ☆25Updated 7 years ago
• mauronz / malware_analysis
  ☆15Updated 3 years ago
• CERT-Bund / yara-exporter
  Exporting MISP event attributes to yara rules usable with Thor apt scanner
  ☆24Updated 7 years ago
• nccgroup / Royal_APT
  Royal APT - APT15 - Related Information from NCC Group Cyber Defense Operations Research
  ☆53Updated 6 years ago
• snemes / malware-analysis
  ☆23Updated 4 years ago