Repository Index

The FLARE team's open-source tool to identify capabilities in executable files.

• malware-analysis
• reverse-engineering
• binary-analysis
• threat-intelligence

Android Application Identifier for Packers, Protectors, Obfuscators and Oddities - PEiD for Android

• android
• antivirus
• machine-learning
• malware-detection

Incident Response - Fast suspicious file finder

• dfir
• investigation
• incident-response
• threat-hunting

Wraps around various tools and provides some additional checks/information to produce a centralized report of a PE file.

simple YARA-based IOC scanner

• yara
• ioc
• security
• incident-response

Python implementation of the Packed Executable iDentifier (PEiD)

• peid
• peid-signature
• pe-file
• pe-files

A Python library and command line tools to provide interactive log visualization.

• cybersecurity
• investigation
• malware-analysis
• malware-research

Zero-overhead eBPF process tracer for Linux malware triage and incident response. Traces syscalls, network, and file events per-process without strace overhead.

• bpf
• ebpf
• forensics
• golang

Android Malware Behavior Deleter

• android
• malware
• antivirus
• editor

A malware dataset curation tool which helps identify packed samples.

• malware
• packer
• security
• peid

A simple many-rules to many-files YARA scanner for incident response or malware zoos.

• yara
• yara-scanner
• incident-response
• dfir