1.mandiant / capaThe FLARE team's open-source tool to identify capabilities in executable files.malware-analysisreverse-engineeringbinary-analysisthreat-intelligencegsoc-2026PythonAPACHE-2.06.3K total745 forks+188 starsfrom 6,111 · score 5.24
2.mandiant / flare-flossFLARE Obfuscated String Solver - Automatically extract obfuscated strings from malware.malwaredeobfuscationstringsflaremalware-analysisgsoc-2026PythonAPACHE-2.04.2K total545 forks+115 starsfrom 4,094 · score 4.75
3.mandiant / flare-fakenet-ngFakeNet-NG - Next Generation Dynamic Network Analysis Toolfakenet-ngtraffic-redirectionmalware-analysismandiant-flaregsoc-2026PythonAPACHE-2.02.2K total379 forks+58 starsfrom 2,166 · score 4.08
4.maliceio / maliceArchivedVirusTotal Wanna Be - Now with 100% more Hipstermalicedockermalwareinfosecvirustotalelasticsearch+7 moreGoAPACHE-2.01.9K total285 forks+7 starsfrom 1,857 · score 2.08
5.airbnb / binaryalertBinaryAlert: Serverless, Real-time & Retroactive Malware Detection.securityyaraserverlessterraformlambdaaws+1 morePythonAPACHE-2.01.5K total177 forks+1 starsfrom 1,454 · score 0.69