tiq-test by mlsecproject

Threat Intelligence Quotient Test - Dataviz and Statistical Analysis of TI feeds

updated at Jan. 30, 2024, 4:14 a.m.

R

24 +0

165 +0

43 +0

GitHub
massive-octo-spice by csirtgadgets

DEPRECATED - USE v3 (bearded-avenger)

updated at Feb. 4, 2024, 7:58 a.m.

Perl

56 +0

227 +0

62 +0

GitHub
inVtero.net by ShaneK2

inVtero.net: A high speed (Gbps) Forensics, Memory integrity & assurance. Includes offensive & defensive memory capabilities. Find/Extract processes, hypervisors (including nested) in memory dumps using microarchitechture independent Virtual Machiene Introspection techniques

updated at Feb. 5, 2024, 5:10 p.m.

C#

31 +0

276 +0

57 +0

GitHub
squidmagic by ch3k1

analyze a web-based network traffic 🕶 to detect central command and control servers

updated at Feb. 8, 2024, 8:56 p.m.

Python

8 +0

75 +0

27 +0

GitHub
hostintel by keithjjones

A modular Python application to collect intelligence for malicious hosts.

updated at Feb. 9, 2024, 5:33 p.m.

Python

30 +0

258 +0

52 +0

GitHub
hackers-grep by codypierce

hackers-grep is a utility to search for strings in PE executables including imports, exports, and debug symbols

updated at Feb. 18, 2024, 8:27 p.m.

Python

9 +0

165 +0

19 +0

GitHub
NoMoreXOR by hiddenillusion

Tool to help guess a files 256 byte XOR key by using frequency analysis

updated at Feb. 24, 2024, 11:41 a.m.

Python

12 +0

81 +0

20 +0

GitHub
python-icap-yara by RamadhanAmizudin

An ICAP Server with yara scanner for URL and content.

updated at March 12, 2024, 12:41 p.m.

Python

6 +0

56 +0

13 +0

GitHub
BoomBox by nbeede

Automatic deployment of Cuckoo Sandbox malware lab using Packer and Vagrant

updated at March 19, 2024, 10:18 a.m.

PowerShell

8 +0

231 +0

39 +0

GitHub
fileintel by keithjjones

A modular Python application to pull intelligence about malicious files

updated at March 20, 2024, 12:49 a.m.

Python

17 +0

113 +0

25 +0

GitHub
VolUtility by kevthehermit

Web App for Volatility framework

updated at March 24, 2024, 4:56 p.m.

Python

40 +0

373 +0

82 +1

GitHub
mnemosyne by johnnykv

Normalizer for honeypot data.

updated at March 26, 2024, 2:39 a.m.

Python

8 +0

44 +0

41 -1

GitHub
VolDiff by aim4r

VolDiff: Malware Memory Footprint Analysis based on Volatility

updated at March 26, 2024, 6:38 a.m.

Python

28 +0

192 +0

50 +0

GitHub
DAMM by 504ensicsLabs

Differential Analysis of Malware in Memory

updated at March 26, 2024, 4:23 p.m.

Python

31 +0

209 +0

56 +0

GitHub
sflock by hatching

Sample staging & detonation utility to be used in combination with Cuckoo Sandbox.

updated at March 26, 2024, 7:45 p.m.

Python

12 +0

81 +0

48 +0

GitHub
httpreplay by hatching

Replay HTTP and HTTPS requests from a PCAP based on TLS Master Secrets.

updated at March 26, 2024, 7:46 p.m.

Python

13 +0

94 +0

33 -3

GitHub
packerid by sooshie

None

updated at March 27, 2024, 10:19 a.m.

Python

5 +0

40 +0

9 +0

GitHub
CryptoKnight by AbertayMachineLearningGroup

Cryptographic Dataset Generation & Modelling Framework

updated at April 2, 2024, 6:43 a.m.

Python

6 +0

38 +0

12 +0

GitHub
jsunpack-n by urule99

Automatically exported from code.google.com/p/jsunpack-n

updated at April 3, 2024, 2:49 p.m.

Python

16 +0

157 +0

65 +0

GitHub
malsub by diogo-fernan

A Python RESTful API framework for online malware analysis and threat intelligence services.

updated at April 4, 2024, 3:30 a.m.

Python

36 +0

362 +0

83 +0

GitHub