Repository Index

The FLARE team's open-source tool to identify capabilities in executable files.

• malware-analysis
• reverse-engineering
• binary-analysis
• threat-intelligence

Volatility plugin for extracts configuration data of known malware

• malware
• volatility
• forensics
• python

VolatilityBot – An automated memory analyzer for malware samples and memory dumps

Ragpicker is a Plugin based malware crawler with pre-analysis and reporting functionalities. Use this tool if you are testing antivirus products, collecting malware for another analyzer/zoo.

Sample staging & detonation utility to be used in combination with Cuckoo Sandbox.

Based on the Volatility framework, this script will run various plugins as well as create a timeline, or use YARA/ClamAV/VirusTotal to find badness.

Zero-overhead eBPF process tracer for Linux malware triage and incident response. Traces syscalls, network, and file events per-process without strace overhead.

• bpf
• ebpf
• forensics
• golang