tccontre / KnowledgeBase

Related projects ⓘ

Alternatives and complementary repositories for KnowledgeBase

• fr0gger / MalwareMuncher
  Malware Muncher is a proof-of-concept Python script that utilizes the Frida framework for binary instrumentation and API hooking, enablin…
  ☆42Updated last year
• memprocfshunt / MemProcFSHunter
  A powershell parser for https://github.com/ufrisk/MemProcFS
  ☆43Updated 3 years ago
• sisoma2 / malware_analysis
  Scripts, Yara rules and other files developed during malware investigations
  ☆24Updated 2 years ago
• deepinstinct / DeMotet
  Unpacking and decryption tools for the Emotet malware
  ☆46Updated 2 years ago
• Dump-GUY / Invoke-DetectItEasy
  Invoke-DetectItEasy is a wrapper for excelent tool called Detect-It-Easy. This PS module is very useful for Threat Hunting and Forensics.
  ☆23Updated 2 years ago
• hasherezade / pe2pic
  Small visualizator for PE files
  ☆67Updated last year
• jstrosch / subparse
  Modular malware analysis artifact collection and correlation framework
  ☆52Updated 6 months ago
• 3c7 / bazaar
  Python based CLI for MalwareBazaar
  ☆36Updated 3 weeks ago
• elastic / die-python
  Native Python3 bindings for @horsicq's Detect-It-Easy
  ☆48Updated 3 weeks ago
• woanware / etw-event-dumper
  ☆31Updated 2 years ago
• cdong1012 / IDAPython-Malware-Scripts
  ☆66Updated 11 months ago
• mandiant / apooxml
  Generate YARA rules for OOXML documents.
  ☆37Updated last year
• X-Junior / Malware-IDAPython-Scripts
  ☆22Updated 5 months ago
• embee-research / Icedid-file-decryptor
  Static Decryptor for IcedID Malware
  ☆18Updated 2 years ago
• naksyn / talks
  Repo containing my public talks
  ☆22Updated last year
• PwCUK-CTO / ScatterBee_Analysis
  Scripts to aid analysis of files obfuscated with ScatterBee.
  ☆15Updated last year
• stairwell-inc / cobalt-strike-stager-parser
  ☆34Updated last year
• nasbench / SEDR-Internals
  Symantec EDR Internals
  ☆25Updated 3 years ago
• 3vangel1st / 100DaysOfYARA
  ☆27Updated 2 years ago
• herosi / triage-collector
  ☆21Updated last month
• leandrofroes / malware-research
  General malware analysis stuff
  ☆35Updated 2 months ago
• archcloudlabs / r2elk
  Radare2 Metadata Extraction to Elasticsearch
  ☆21Updated 6 months ago
• malware-kitten / shellcode_hashes
  A collection of shellcode hashes
  ☆17Updated 6 years ago
• hasherezade / mal_unpack_py
  Python wrappers for mal_unpack
  ☆34Updated last year
• Dump-GUY / CAPA_JsonConver
  Converts exported results of CAPA tool from .json format to another formats supporting by different tools.
  ☆22Updated 2 years ago
• edygert / runsc
  runsc loads 32/64 bit shellcode (depending on how runsc is compiled) in a way that makes it easy to load in a debugger. This code is base…
  ☆36Updated last year
• NtQuerySystemInformation / Malware-RE-papers
  Here are some of my malware reversing papers that I will be publishing
  ☆31Updated 2 years ago
• g-les / 100DaysofYARA
  100 Days of YARA to be updated with rules & ideas as the year progresses
  ☆56Updated last year
• ufrisk / MemProcFS-plugins
  ☆55Updated last month
• c3rb3ru5d3d53c / mwcfg-modules
  Malware Configuration Extraction Modules
  ☆47Updated 11 months ago