malvidin Goto Github PK

2023

Rules Shared by the Community from 100 Days of YARA 2023

assemblyline-base

Base components for Assemblyline 4 (Datastore, ODM, Filestore, Remote Datatypes, utils function, etc...)

assemblyline-docker-compose

Docker compose Assemblyline deployment (appliance and development)

assemblyline-incident-manager

assemblyline-service-dexray

service which extract quarantined files

assemblyline-service-oletools

Assemblyline 4 Microsoft OLE/XML file analysis service

assemblyline-service-yara

Assemblyline 4 Yara signature and Post tag processing services

assemblyline-ui-frontend

assemblyline-v4-service

Base service class from Assemblyline 4

assemblyline_client

Python client for Assemblyline 3 and 4 / Client python pour AssemblyLine 3 and 4

base58

Base58 and Base58Check implementation compatible with what is used by the bitcoin network.

base64

The base64 custom search command is a command that does Base64 encoding and decoding. Includes a MIME decoding command for base64 (B) data.

base64_guesscase

bs58-rs

Another Rust Base58 codec implementation

cart

cccs-yara

YARA rule metadata specification and validation utility

checkdmarc

A parser for SPF and DMARC DNS records

cpython

The Python programming language

crits

CRITs - Collaborative Research Into Threats

crt.sh

(Unofficial) Python API for https://crt.sh

cti-python-stix2

OASIS TC Open Repository: Python APIs for STIX 2

cve-2020-0601

PoC for CVE-2020-0601

decrypt2

Fork of the DECRYPT app on SplunkBase

docker

This repository contains Dockerfiles for building Docker images of popular malware analysis tools, which are distributed through the REMnux repository on Docker Hub.

eml_parser

python eml parser module

linux_cac

A project for consistently configuring DOD Common Access Cards on Linux.

misp-docker

A production ready Dockered MISP

misp42splunk

A Splunk app to use MISP in background

olefile

olefile is a Python package to parse, read and write Microsoft OLE2 files (also called Structured Storage, Compound File Binary Format or Compound Document File Format), such as Microsoft Office 97-2003 documents, vbaProject.bin in MS Office 2007+ files, Image Composer and FlashPix files, Outlook messages, StickyNotes, several Microscopy file formats, McAfee antivirus quarantine files, etc.

oletools

oletools - python tools to analyze MS OLE2 files (Structured Storage, Compound File Binary Format) and MS Office documents, for malware analysis, forensics and debugging.