Security sensor for realtime threat detection and protection
Repository Index
58,136 visible repositories in the index
1–8 of 8 · Most stars
PEframe is a open source tool to perform static analysis on Portable Executable malware and malicious MS Office documents.
Endpoint detection for Windows, Linux, and macOS. Sigma, YARA, and IOC rules on native telemetry. Written in Rust. No cloud account required.
- blue-team
- detection-engineering
- edr
- endpoint-detection
ShowStopper is a tool for helping malware researchers explore and test anti-debug techniques or verify debugger plugins or other solutions that clash with standard anti-debug methods.
BluePill: Neutralizing Anti-Analysis Behavior in Malware Dissection (Black Hat Europe 2019, IEEE TIFS 2020)
Tool to help guess a files 256 byte XOR key by using frequency analysis
- frequency-analysis
- python
- xor
- malware
YALIH (Yet Another Low Interaction Honeyclient) is a low Interaction Client honeypot designed to detect malicious websites through signature, anomaly and pattern matching techniques
🕵️♀️ Find, locate, and query files for ops and security experts ⚡️⚡️⚡️