tylabs / quicksandLinks
QuickSand document and PDF malware analysis tool written in Python
☆134Updated last month
Alternatives and similar repositories for quicksand
Users that are interested in quicksand are comparing it to the libraries listed below
Sorting:
- File analysis and management framework.☆91Updated 2 years ago
- This repository contains analysis scripts, YARA rules, and additional IoCs related to our Telekom Security blog posts.☆119Updated 2 years ago
- YARA rule metadata specification and validation utility / Spécification et validation pour les règles YARA☆114Updated 7 months ago
- Rules Shared by the Community from 100 Days of YARA 2023☆78Updated 2 years ago
- A toolkit for the post-mortem examination of Docker containers from forensic HDD copies☆106Updated last year
- Further investigation in to APT campaigns disclosed by private security firms and security agencies☆87Updated 3 years ago
- JPCERT/CC public YARA rules repository☆110Updated last month
- YARA rule analyzer to improve rule quality and performance☆107Updated 8 months ago
- ☆76Updated 2 months ago
- A guide on how to write fast and memory friendly YARA rules☆159Updated 10 months ago
- ☆149Updated last month
- Base components for Assemblyline 4 (Datastore, ODM, Filestore, Remote Datatypes, utils function, etc...)☆70Updated this week
- Collection of rules created using YARA-Signator over Malpedia☆139Updated last year
- Detection Engineering with YARA☆87Updated last year
- ☆96Updated 7 months ago
- acquire is a tool to quickly gather forensic artifacts from disk images or a live system into a lightweight container.☆112Updated last week
- BlackBerry Threat Research & Intelligence☆99Updated 2 years ago
- Digital Forensics Artifacts Knowledge Base☆88Updated 3 weeks ago
- A YARA rules repository continuously updated for monitoring the old and new threats from articles, incidents responses ...☆141Updated 2 years ago
- ☆131Updated last year
- Rapid7 Labs operates as the division of Rapid7 focused on threat research. It is renowned for providing comprehensive threat intelligence…☆73Updated this week
- This repo is a collection of Ransomware reports from vendors, researchers, etc.☆120Updated 3 years ago
- Open Source Platform for storing, organizing, and searching documents related to cyber threats☆168Updated 2 years ago
- SubCrawl is a modular framework for discovering open directories, identifying unique content through signatures and organizing the data w…☆147Updated 2 years ago
- This repository is for Indicators of Compromise (IOCs) from Zscaler ThreatLabz public reports☆75Updated last week
- The Windows Malware Analysis Reversing Core Tools☆97Updated 4 years ago
- Python based CLI for MalwareBazaar☆39Updated 4 months ago
- A python script developed to process Windows memory images based on triage type.☆265Updated 2 years ago
- ATT&CK Powered Suit is a browser extension that puts the complete MITRE ATT&CK® knowledge base at your fingertips with text search, conte…☆80Updated 6 months ago
- IOCs published by Black Lotus Labs☆124Updated last month