Repository Index

Loki - Simple IOC and YARA Scanner

• python
• yara
• signature
• scanner

Security sensor for realtime threat detection and protection

• windows
• windows-kernel
• instrumentation
• security

Noriben - Portable, Simple, Malware Analysis Sandbox

Simple Bash IOC Scanner

Sandbox for semi-automatic Javascript malware analysis, deobfuscation and payload extraction. Written for Node.js

• malware-samples
• wscript
• deobfuscation
• angler

VolatilityBot – An automated memory analyzer for malware samples and memory dumps

simple YARA-based IOC scanner

• yara
• ioc
• security
• incident-response

Python implementation of the Packed Executable iDentifier (PEiD)

• peid
• peid-signature
• pe-file
• pe-files

Simple framework to extract "actionable" data from Android malware (C&Cs, phone numbers etc.)

Sample staging & detonation utility to be used in combination with Cuckoo Sandbox.

Builds json representation of PDF malware sample

A malware dataset curation tool which helps identify packed samples.

• malware
• packer
• security
• peid

A simple many-rules to many-files YARA scanner for incident response or malware zoos.

• yara
• yara-scanner
• incident-response
• dfir

Yet another implementation of PEiD with yara

• binary-analysis
• yara
• yara-rules
• peid

Implementation of the packing detection heuristic from the paper "Packed PE File Detection for Malware Forensics" of Han et al.

• binary-analysis
• entropy
• entrypoint
• executable-packing

A simple tool to organise large malicious/benign files into a organised Structure.

• malware
• malware-analysis
• malware-research
• clean-file

Simple tool to find the yara matches on a file

• yara
• yara-rules
• malware
• malware-analysis