Repository Index

Security sensor for realtime threat detection and protection

• windows
• windows-kernel
• instrumentation
• security

A machine learning tool that ranks strings based on their relevance for malware analysis.

• machine-learning
• fireeye-flare
• strings
• malware-analysis

Malicious HTTP traffic explorer

A tool for studying JavaScript malware.

• malware
• malwareanalysis
• nodejs
• es6

PEframe is a open source tool to perform static analysis on Portable Executable malware and malicious MS Office documents.

Java library to analyse Portable Executable files with a special focus on malware analysis and PE malformation robustness

Yet another static code analyzer for malicious Android applications

AVClass malware labeling tool

Incident Response - Fast suspicious file finder

• dfir
• investigation
• incident-response
• threat-hunting

simple YARA-based IOC scanner

• yara
• ioc
• security
• incident-response

A modular Python application to pull intelligence about malicious files

• malware-analysis
• malware-research
• investigation
• cybersecurity

The current repository contains all the scripts needed to build kernel-mode mac-a-mal malicious activity hooking on macOS.

• macos

YALIH (Yet Another Low Interaction Honeyclient) is a low Interaction Client honeypot designed to detect malicious websites through signature, anomaly and pattern matching techniques

Control Flow Graph Scanning for Android

Zero-overhead eBPF process tracer for Linux malware triage and incident response. Traces syscalls, network, and file events per-process without strace overhead.

• bpf
• ebpf
• forensics
• golang

Android Malware Behavior Deleter

• android
• malware
• antivirus
• editor

A simple many-rules to many-files YARA scanner for incident response or malware zoos.

• yara
• yara-scanner
• incident-response
• dfir