1. Shimcacheparser
✭ 219
python2. Ioc writer
✭ 169
python9. jitm
JITM is an automated tool to bypass the JIT Hooking protection on a .NET sample.
10. remote lookup
Resolves DLL API entrypoints for a process w/ remote query capabilities.
11. rvmi-rekall
Rekall Forensics and Incident Response Framework with rVMI extensions
13. flare-dbg
flare-dbg is a project meant to aid malware reverse engineers in rapidly developing debugger scripts.
14. unicorn-libemu-shim
libemu shim layer and win32 environment for Unicorn Engine
18. tf rl tutorial
Tutorial: Statistical Relational Learning with Google TensorFlow
20. stringsifter
A machine learning tool that ranks strings based on their relevance for malware analysis.
21. speakeasy
Windows kernel and user mode emulation.
23. ThreatPursuit-VM
Threat Pursuit Virtual Machine (VM): A fully customizable, open-sourced Windows-based distribution focused on threat intelligence analysis and hunting designed for intel and malware analysts as well as threat hunters to get up and running quickly.
28. flashmingo
Automatic analysis of SWF files based on some heuristics. Extensible via plugins.
37. FIDL
A sane API for IDA Pro's decompiler. Useful for malware RE and vulnerability research
1-37 of 37 user projects