Repository Index

Program for determining types of files for Windows, Linux and MacOS.

• debugger
• detect
• unpacker
• disassembler

Android Application Identifier for Packers, Protectors, Obfuscators and Oddities - PEiD for Android

• android
• antivirus
• machine-learning
• malware-detection

Security sensor for realtime threat detection and protection

• windows
• windows-kernel
• instrumentation
• security

The repository host gives no description.

• defcon
• android
• blackhat
• blackbox

Elastic Security detection content for Endpoint

BinaryAlert: Serverless, Real-time & Retroactive Malware Detection.

• security
• yara
• serverless
• terraform

Script to create templates to use with VirtualBox to make vm detection harder

• virtualbox
• antivm
• sandbox
• malware-analysis

WinDBG Anti-RootKit Extension

• kernel-mode
• c-plus-plus
• malware
• malware-analysis

Drltrace is a library calls tracer for Windows and Linux applications.

• dbi
• malware-analysis
• malware-detection
• api-trace

A framework for automated extraction of static and dynamic features from Android applications

• android-malware-detection
• android-analysis

C++ application that uses memory and code hooks to detect packers

Android Mobile Device Hardening

• forensic
• security
• hardening
• android-security

Open-source cross-platform defensive spyware, stalkerware and surveillance software detector

• anti-surveillance
• dfir
• keylogger-detector
• privacy

x86 emulation and shellcode detection

Python implementation of the Packed Executable iDentifier (PEiD)

• peid
• peid-signature
• pe-file
• pe-files

ebpfkit-monitor is a tool that detects and protects against eBPF powered rootkits

• linux
• security
• kernel
• rootkit

YALIH (Yet Another Low Interaction Honeyclient) is a low Interaction Client honeypot designed to detect malicious websites through signature, anomaly and pattern matching techniques

Docker image gathering packers and tools for making datasets of packed executables and training machine learning models for packing detection

• docker-image
• executable-packing
• malware-packers
• research-platform

Analysis tool for estimating the likelihood that a binary contains compressed or encrypted bytes

• entropy
• pe-file
• pe-files
• pe-format

Zero-overhead eBPF process tracer for Linux malware triage and incident response. Traces syscalls, network, and file events per-process without strace overhead.

• bpf
• ebpf
• forensics
• golang

A malware dataset curation tool which helps identify packed samples.

• malware
• packer
• security
• peid

Packing detection tool for PE files

• detector
• pe-file
• pe-format
• peid