threatcat-ch / malware-analysis-pipelineLinks
Lightweight Python-Based Malware Analysis Pipeline
☆36Updated this week
Alternatives and similar repositories for malware-analysis-pipeline
Users that are interested in malware-analysis-pipeline are comparing it to the libraries listed below
Sorting:
- Factual-rules-generator is an open source project which aims to generate YARA rules about installed software from a machine.☆75Updated 3 years ago
- Rules Shared by the Community from 100 Days of YARA 2023☆78Updated 2 years ago
- HTTP Headers Hashing (HHHash) is a technique used to create a fingerprint of an HTTP server based on the headers it returns.☆79Updated 2 years ago
- CyberChef - Detection Engineering, TI, DFIR, Malware Analysis Edition☆66Updated 3 years ago
- Python based CLI for MalwareBazaar☆39Updated 4 months ago
- C2 Active Scanner☆60Updated last year
- A new Cyber Threat Intelligence Capability Maturity Model (CTI-CMM) to empower your team and create lasting value. Inspired by Industry N…☆40Updated 7 months ago
- This repository contains analysis scripts, YARA rules, and additional IoCs related to our Telekom Security blog posts.☆119Updated last year
- TAPIR is a multi-user, client/server, incident response framework☆47Updated 3 years ago
- BlackBerry Threat Research & Intelligence☆99Updated 2 years ago
- A web scraper to create MISP events and reports☆17Updated 5 months ago
- A zero dependency and customizable Python library for scanning Windows and Linux process memory.☆66Updated last year
- MasterParser is a simple, all-in-one, digital forensics artifact parser☆23Updated 4 years ago
- Scripts to integrate DFIR-IRIS, MISP and TimeSketch☆34Updated 3 years ago
- Open-source Fabric templates for cybersecurity and compliance☆27Updated 10 months ago
- ☆44Updated 5 months ago
- A python script to acquire multiple aws ec2 instances in a forensically sound-ish way☆38Updated 4 years ago
- An extension of the sigma standard to include security metrics.☆15Updated 2 years ago
- Further investigation in to APT campaigns disclosed by private security firms and security agencies☆87Updated 3 years ago
- YaraScanner is a file pattern-matching tool based on YARA rules.☆59Updated 2 years ago
- A collection of tips for using MISP.☆75Updated last year
- Rip Raw is a small tool to analyse the memory of compromised Linux systems.☆133Updated 3 years ago
- A home for detection content developed by the delivr.to team☆73Updated 4 months ago
- Surface Analysis System on Cloud☆19Updated last year
- SkillAegis is a platform to design, run, and monitor exercise scenarios, enhancing skills in applications like MISP and training users in…☆34Updated last month
- Repository that contains a set of purposefully erroneous Yara rules.☆61Updated 4 months ago
- Automatic detection engineering technical state compliance☆55Updated last year
- Analyse a forensic target (such as a directory) to find and report files found and not found from CIRCL hashlookup public service - https…☆126Updated 2 years ago
- Offensive Research Guide to Help Defense Improve Detection☆31Updated 2 years ago
- orc2timeline extracts and analyzes artifacts contained in archives generated with DFIR-ORC.exe to create a timeline from them☆34Updated 5 months ago