Program for determining types of files for Windows, Linux and MacOS.
- debugger
- detect
- unpacker
- disassembler
Repository Index
47,133 repositories indexed
1–21 of 21 · Most stars
The FLARE team's open-source tool to identify capabilities in executable files.
- malware-analysis
- reverse-engineering
- binary-analysis
- threat-intelligence
Scan files or process memory for CobaltStrike beacons and parse their configuration
Automatic and platform-independent unpacker for Windows binaries based on emulation
- reverse-engineering
- unpacker
- pefile
- windows
Modular file scanning/analysis framework
- python
- analytic-machines
- analysis-framework
- python-script
Java library to analyse Portable Executable files with a special focus on malware analysis and PE malformation robustness
DC3 Malware Configuration Parser (DC3-MWCP) is a framework for parsing configuration information from malware. The information extracted from malware includes items such as addresses, passwords, filenames, and mutex names.
- python
- malware-analysis
- automation
- config-dump
File Scanning Framework
- security-tools
- network-defense
- file-analysis
- file-analyzer
Incident Response - Fast suspicious file finder
- dfir
- investigation
- incident-response
- threat-hunting
Wraps around various tools and provides some additional checks/information to produce a centralized report of a PE file.
Tool to help analyze PDF files
Python implementation of the Packed Executable iDentifier (PEiD)
- peid
- peid-signature
- pe-file
- pe-files
A modular Python application to pull intelligence about malicious files
- malware-analysis
- malware-research
- investigation
- cybersecurity
Tool to help guess a files 256 byte XOR key by using frequency analysis
- frequency-analysis
- python
- xor
- malware
Analysis tool for estimating the likelihood that a binary contains compressed or encrypted bytes
- entropy
- pe-file
- pe-files
- pe-format
Zero-overhead eBPF process tracer for Linux malware triage and incident response. Traces syscalls, network, and file events per-process without strace overhead.
🕵️♀️ Find, locate, and query files for ops and security experts ⚡️⚡️⚡️
A malware dataset curation tool which helps identify packed samples.
Packing detection tool for PE files
- detector
- pe-file
- pe-format
- peid
A simple many-rules to many-files YARA scanner for incident response or malware zoos.
- yara
- yara-scanner
- incident-response
- dfir
A tool for detecting viruses and NSFW material in WARC files
- antivirus
- nsfw-classifier
- warc
- warc-safe