sysopfb / open_mal_analysis_notesLinks
open source malware analysis and research notes dump
☆26Updated 2 years ago
Alternatives and similar repositories for open_mal_analysis_notes
Users that are interested in open_mal_analysis_notes are comparing it to the libraries listed below
Sorting:
- Maltego transforms to pivot between PE files based on their VirusTotal codeblocks☆18Updated 4 years ago
- ☆23Updated 5 years ago
- Converts exported results of CAPA tool from .json format to another formats supporting by different tools.☆22Updated 3 years ago
- Notepad++ Syntax Highlighting for Languages Used by Cyber Security Professionals☆14Updated 5 years ago
- Data from analysis of the custom sample from the chapter "Practical Analysis and Test"☆12Updated 5 years ago
- Royal APT - APT15 - Related Information from NCC Group Cyber Defense Operations Research☆53Updated 7 years ago
- The Multiplatform Linux Sandbox☆16Updated last year
- ☆13Updated 4 years ago
- Scripts, Yara rules and other files developed during malware investigations☆25Updated 3 years ago
- ☆24Updated 6 years ago
- ☆36Updated 5 years ago
- ☆18Updated 5 years ago
- A set of tools for collecting forensic information☆26Updated 5 years ago
- ☆14Updated 6 years ago
- A Microsoft Windows service to provide telemetry on Windows executable memory page changes to facilitate threat detection☆32Updated 5 years ago
- Rekall Memory Forensic Framework☆33Updated 6 years ago
- ☆23Updated 2 years ago
- TA505 unpacker Python 2.7☆47Updated 5 years ago
- Generates YARA rules to detect malware using API hashing☆17Updated 4 years ago
- AMSI detection PoC☆31Updated 5 years ago
- Help deobfuscate VBScript☆16Updated 3 years ago
- Telsy CTI Research Team☆57Updated 4 years ago
- ConventionEngine - A Yara Rulepack for PDB Path Hunting☆37Updated 2 years ago
- This repository contains various files linked to Operation Shadowhammer as it was originally discovered by Kaspersky Team.☆12Updated 6 years ago
- Scripts targeting specific families☆13Updated 8 years ago
- Liberating dem proprietary APT implants☆20Updated 5 years ago
- A spiritual .NET equivalent to the Gargoyle memory scanning evasion technique☆52Updated 6 years ago
- QuasarRAT analysis tools and research report☆27Updated last year
- ☆24Updated last year
- Tool to decrypt the configuration of NanoCore and dump all used plugins☆11Updated 4 years ago