Repository Index

The FLARE team's open-source tool to identify capabilities in executable files.

• malware-analysis
• reverse-engineering
• binary-analysis
• threat-intelligence

Security sensor for realtime threat detection and protection

• windows
• windows-kernel
• instrumentation
• security

Malcom - Malware Communications Analyzer

• malware
• network-traffic
• pcap
• threat-intelligence

Incident Response - Fast suspicious file finder

• dfir
• investigation
• incident-response
• threat-hunting

YALIH (Yet Another Low Interaction Honeyclient) is a low Interaction Client honeypot designed to detect malicious websites through signature, anomaly and pattern matching techniques

Zero-overhead eBPF process tracer for Linux malware triage and incident response. Traces syscalls, network, and file events per-process without strace overhead.

• bpf
• ebpf
• forensics
• golang