Malware/IOC ingestion and processing engine
created at April 4, 2018, 10:05 p.m.
EVTXtract recovers and reconstructs fragments of EVTX log files from raw binary data, including unallocated space and memory images.
created at Oct. 5, 2013, 8:59 p.m.
Reverse engineering tool for virtualization wrappers
created at June 28, 2013, 6:55 p.m.
A set of Maltego transforms for VirusTotal Public API v2.0. This set has the added functionality of caching queries on a daily basis to speed up resolutions.
created at March 9, 2015, 6:52 a.m.
Tool to help guess a files 256 byte XOR key by using frequency analysis
created at Jan. 22, 2013, 9:09 p.m.
A framework for receiving and redistributing abuse feeds
created at Nov. 25, 2015, 12:35 p.m.
hackers-grep is a utility to search for strings in PE executables including imports, exports, and debug symbols
created at Aug. 31, 2015, 5:02 p.m.
Collection of malware persistence and hunting information. Be a persistent persistence hunter!
created at March 30, 2020, 1:52 p.m.
An ICAP Server with yara scanner for URL and content.
created at Feb. 6, 2017, 4:17 p.m.
Pythonic interface to the Internet Storm Center / DShield API.
created at July 1, 2014, 1:54 p.m.
ThreatTracker is a Python script designed to monitor and generate alerts on given sets of indicators of compromise (IOCs) indexed by a set of Google Custom Search Engines.
created at March 9, 2015, 7:19 a.m.
Pure Python parser for classic Windows Event Log files (.evt)
created at Jan. 24, 2015, 4:07 p.m.
Cryptographic Dataset Generation & Modelling Framework
created at Sept. 2, 2018, 3:15 p.m.
Checks with NSRL RDS servers looking for for hash matches
created at March 2, 2013, 4:35 p.m.
Lite version of PDF X-RAY that uses no backend
created at Nov. 11, 2011, 4:49 a.m.