58,632 visible repositories in the index
1–3 of 3 · Most stars
DECAF (short for Dynamic Executable Code Analysis Framework) is a binary analysis platform based on QEMU. This is also the home of the DroidScope dynamic Android malware analysis platform. DroidScope is now an extension to DECAF.
The current repository contains all the scripts needed to build kernel-mode mac-a-mal malicious activity hooking on macOS.
Zero-overhead eBPF process tracer for Linux malware triage and incident response. Traces syscalls, network, and file events per-process without strace overhead.