Repository Index

The FLARE team's open-source tool to identify capabilities in executable files.

• malware-analysis
• reverse-engineering
• binary-analysis
• threat-intelligence

Security sensor for realtime threat detection and protection

• windows
• windows-kernel
• instrumentation
• security

Malcom - Malware Communications Analyzer

• malware
• network-traffic
• pcap
• threat-intelligence

Incident Response - Fast suspicious file finder

• dfir
• investigation
• incident-response
• threat-hunting

Zero-overhead eBPF process tracer for Linux malware triage and incident response. Traces syscalls, network, and file events per-process without strace overhead.

• bpf
• ebpf
• forensics
• golang

Threat Detection Rules (Snort/Sigma/Yara)

Advanced eBPF-driven Digital Forensics and Incident Response (DFIR) framework for live Golang malware analysis, threat hunting, and observability.

• bpf
• ebpf
• forensics
• goroutine