Repository Index

The pattern matching swiss knife

Volatility plugin for extracts configuration data of known malware

• malware
• volatility
• forensics
• python

The pattern matching swiss knife

Simple framework to extract "actionable" data from Android malware (C&Cs, phone numbers etc.)

Sample staging & detonation utility to be used in combination with Cuckoo Sandbox.

YALIH (Yet Another Low Interaction Honeyclient) is a low Interaction Client honeypot designed to detect malicious websites through signature, anomaly and pattern matching techniques

Based on the Volatility framework, this script will run various plugins as well as create a timeline, or use YARA/ClamAV/VirusTotal to find badness.

Yet another implementation of PEiD with yara

• binary-analysis
• yara
• yara-rules
• peid

Integrated MALware Simulator and Emulator

Simple tool to find the yara matches on a file

• yara
• yara-rules
• malware
• malware-analysis