Security sensor for realtime threat detection and protection
Repository Index
47,133 repositories indexed
1–16 of 16 · Most stars
Elastic Security detection content for Endpoint
Powerful Python tool to analyze PDF documents
Scan files or process memory for CobaltStrike beacons and parse their configuration
PEframe is a open source tool to perform static analysis on Portable Executable malware and malicious MS Office documents.
Volatility plugin for extracts configuration data of known malware
Limon is a sandbox developed as a research project written in python, which automatically collects, analyzes, and reports on the run time indicators of Linux malware. It allows one to inspect Linux malware before execution, during execution, and after execution (post-mortem analysis) by performing static, dynamic and memory analysis using open source tools
ShowStopper is a tool for helping malware researchers explore and test anti-debug techniques or verify debugger plugins or other solutions that clash with standard anti-debug methods.
ebpfkit-monitor is a tool that detects and protects against eBPF powered rootkits
A warehouse for your malware
Ragpicker is a Plugin based malware crawler with pre-analysis and reporting functionalities. Use this tool if you are testing antivirus products, collecting malware for another analyzer/zoo.
The current repository contains all the scripts needed to build kernel-mode mac-a-mal malicious activity hooking on macOS.
Docker image gathering packers and tools for making datasets of packed executables and training machine learning models for packing detection
- docker-image
- executable-packing
- malware-packers
- research-platform
Advanced analysis software for APK payloads created by RATs.
- apk
- remoteaccesstrojan
- reverse-engineering
- aapt
Zero-overhead eBPF process tracer for Linux malware triage and incident response. Traces syscalls, network, and file events per-process without strace overhead.
🕵️♀️ Find, locate, and query files for ops and security experts ⚡️⚡️⚡️