The FLARE team's open-source tool to identify capabilities in executable files.
- malware-analysis
- reverse-engineering
- binary-analysis
- threat-intelligence
Repository Index
47,133 repositories indexed
1–13 of 13 · Most stars
Free, open-source check for traces of mercenary spyware (Pegasus, Predator, Graphite, Candiru and more) on computers, Android phones and iPhone backups. Double-click apps for Windows, Mac and Linux, in 27 languages.
Security sensor for realtime threat detection and protection
yarGen is a generator for YARA rules
- python
- yara
- malware
- malware-research
BinaryAlert: Serverless, Real-time & Retroactive Malware Detection.
Malcom - Malware Communications Analyzer
- malware
- network-traffic
- pcap
- threat-intelligence
Script to create templates to use with VirtualBox to make vm detection harder
- virtualbox
- antivm
- sandbox
- malware-analysis
A tool for studying JavaScript malware.
Incident Response - Fast suspicious file finder
- dfir
- investigation
- incident-response
- threat-hunting
Advanced analysis software for APK payloads created by RATs.
- apk
- remoteaccesstrojan
- reverse-engineering
- aapt
Based on the Volatility framework, this script will run various plugins as well as create a timeline, or use YARA/ClamAV/VirusTotal to find badness.
Zero-overhead eBPF process tracer for Linux malware triage and incident response. Traces syscalls, network, and file events per-process without strace overhead.
Threat Detection Rules (Snort/Sigma/Yara)