Repository Index

Program for determining types of files for Windows, Linux and MacOS.

• debugger
• detect
• unpacker
• disassembler

Loki - Simple IOC and YARA Scanner

• python
• yara
• signature
• scanner

FakeNet-NG - Next Generation Dynamic Network Analysis Tool

• fakenet-ng
• traffic-redirection
• malware-analysis
• mandiant-flare

yarGen is a generator for YARA rules

• python
• yara
• malware
• malware-research

Simple Bash IOC Scanner

Modular file scanning/analysis framework

• python
• analytic-machines
• analysis-framework
• python-script

simple YARA-based IOC scanner

• yara
• ioc
• security
• incident-response

Docker image gathering packers and tools for making datasets of packed executables and training machine learning models for packing detection

• docker-image
• executable-packing
• malware-packers
• research-platform

An ICAP Server with yara scanner for URL and content.

• python
• icap-server
• yara
• malware-analysis

Zero-overhead eBPF process tracer for Linux malware triage and incident response. Traces syscalls, network, and file events per-process without strace overhead.

• bpf
• ebpf
• forensics
• golang

A simple many-rules to many-files YARA scanner for incident response or malware zoos.

• yara
• yara-scanner
• incident-response
• dfir

Detect the Shai Hulud 2.0 npm supply chain attack (796+ packages). Scans for malicious files, hashes, and compromised ecosystems. Fast, accurate scanner.

• cdn
• cve
• polyfill
• polyfill-io

A Single Library Parser to extract meta information,static analysis and detect macros within the files.

• malware-analysis
• pdf-parsing
• pe-executable
• office-files