Canadian Centre for Cyber Security

CCCS-Yara

YARA rule metadata specification and validation utility / Spécification et validation pour les règles YARA

sawp

Security Aware Wire Protocol parsing library

assemblyline_client

Python client for Assemblyline 3 and 4 / Client python pour AssemblyLine 3 and 4

Maco

Maco - Malware config extractor framework

assemblyline-docker-compose

Docker compose Assemblyline 4 deployment (appliance and development)

howler

Elevate your Security Operations Center's efficiency with Howler, the cutting-edge alert triage platform tailored for today's SOC demands.

assemblyline-service-deobfuscripter

Assemblyline 4 Scripts deobfuscator

configextractor-py

Python Library for ConfigExtractor

assemblyline-service-unpacker

Assemblyline 4 unpacking service (UPX)

assemblyline-service-peepdf

Assemblyline 4 PDF Analysis service (PeePDF)

assemblyline-service-XLMMacroDeobfuscator

Assemblyline 4 XLM macro deobfuscator service

cart-rs

assemblyline-development-setup

Assemblyline 4 repo used for setting up a development environment

assemblyline-service-apkaye

Assemblyline 4 Android APK analysis service

assemblyline-service-pdfid

Assemblyline 4 PDF Analysis service (PDFiD)

assemblyline-service-vipermonkey

Assemblyline 4 VBA script emulator service

flux-capacitor

assemblyline-service-frankenstrings

Assemblyline 4 IOC and String extraction service

howler-ui

Howler's UI. Howler is an application that allows analysts to triage hits and alerts. It provides a way for analysts to efficiently review and analyze alerts generated by different analytics and detections.

spark-msgpack-datasource

A spark datasource implementation for the msgpack file format

assemblyline-service-oletools

Assemblyline 4 Microsoft OLE/XML file analysis service

assemblyline-service-unpacme

This Assemblyline service submits PE32 binaries to the unpac.me API and provides the results.

trino

Official repository of Trino, the distributed SQL query engine for big data, formerly known as PrestoSQL (https://trino.io)

assemblyline-service-utilities

A library containing common methods and classes that are used across Assemblyline 4 services

howler-client

The Howler client library facilitates issuing requests to Howler.

ipyaggrid

Using ag-Grid in Jupyter notebooks.

projector-docker

Run JetBrains IDEs remotely with Docker

PySigma-backend-fluxcapacitor

PySigma-backend-spark

spark-cef-reader

A spark reader to read the Common Event Format (CEF) built using Scala and SBT and optimised for Databricks workloads