Binary analysis and management framework
created at Nov. 9, 2013, 6:24 p.m.
A Python library to interface with a cuckoo-modified instance
created at Sept. 25, 2016, 4:15 p.m.
Command line utility and Python package to ease the (un)mounting of forensic disk images
created at Feb. 3, 2014, 10:27 a.m.
A modular Python application to collect intelligence for malicious hosts.
created at Aug. 22, 2016, 8:25 p.m.
Web browser forensics for Google Chrome/Chromium
created at May 22, 2014, 3:25 a.m.
A modular Python application to pull intelligence about malicious files
created at Aug. 30, 2016, 5:35 p.m.
"Security Incidents In A Box!" A modular, menu-driven, cross-platform tool for building customized, time-delayed, distributed security events. Easily create custom event chains for Blue- & Red Team drills and sensor / alert mapping. Red Teams can create decoy incidents, distractions, and lures to support and scale their operations. Build event sequences ("narratives") to simulate realistic scenarios and generate corresponding network and filesystem artifacts.
created at Oct. 5, 2017, 11:44 p.m.
A Python DNS crawler to find identical domain names under different TLDs.
created at April 24, 2015, 10:18 a.m.
A forensic evidence collection & analysis toolkit for OS X
created at Aug. 4, 2014, 6:25 p.m.
VolatilityBot – An automated memory analyzer for malware samples and memory dumps
created at Feb. 4, 2015, 3:13 p.m.
An advanced memory forensics framework
created at April 24, 2014, 3:45 p.m.