Beast code in Giters

oletools - python tools to analyze MS OLE2 files (Structured Storage, Compound File Binary Format) and MS Office documents, for malware analysis, forensics and debugging.

Language:PythonNOASSERTION2887 102 650

jellyfish

🪼 a python library for doing approximate and phonetic matching of strings.

Language:Jupyter NotebookMIT2049 42 136

hollows_hunter

Scans all running processes. Recognizes and dumps a variety of potentially malicious implants (replaced/implanted PEs, shellcodes, hooks, in-memory patches).

Language:CBSD-2-Clause2009 66 15

neovis.js

Neo4j + vis.js = neovis.js. Graph visualizations in the browser with data from Neo4j.

Language:TypeScriptApache-2.01595 43 269

Cortex

Cortex: a Powerful Observable Analysis and Active Response Engine

Language:ScalaAGPL-3.01324 59 441

beagle

Beagle is an incident response and digital forensics tool which transforms security logs and data into graphs.

Language:PythonMIT1270 49 50

nfdump

Netflow processing tools

Language:CNOASSERTION777 63 428

lookyloo

Lookyloo is a web interface that allows users to capture a website page and then display a tree of domains that call each other.

Language:PythonNOASSERTION679 19 196

KapeFiles

This repository serves as a place for community created Targets and Modules for use with KAPE.

MIT643 60 196

CyLR

CyLR - Live Response Collection Tool

Language:C#GPL-3.0624 31 74

PatrowlManager

PatrOwl - Open Source, Smart and Scalable Security Operations Orchestration Platform

Language:HTMLAGPL-3.0623 26 139

e2guardian

E2guardian is a web content filter that can work in proxy, transparent or icap server modes

Language:HTMLGPL-2.0474 49 640

Cortex-Analyzers

Cortex Analyzers Repository

Language:PythonAGPL-3.0431 49 695

mquery

YARA malware query accelerator (web frontend)

Language:PythonAGPL-3.0410 27 151

Fnord

Pattern Extractor for Obfuscated Code

Language:ShellGPL-3.0296 15 1

Vba2Graph

Vba2Graph - Generate call graphs from VBA code, for easier analysis of malicious documents.

Language:PythonEPL-2.0272 19 4

YaraGuardian

Django web interface for managing Yara rules

Language:PythonApache-2.0190 46 45

ypsilon

Automated Use Case Testing

Language:TeXGPL-3.0163 160

d3.layout.timeline

A layout for band-style timelines

Language:JavaScriptUnlicense90 5 6

This project contains code for comparing or ranking APT capabilities and operational capacity. The metrics are meant to quantify, rank, order, compare, or visualise quickly threat actors demonstrated operational capacities. In other words, it is meant to answer questions like 'Which APT produces the most binaries yearly', or 'which apt uses the most daomains'.

Language:PythonApache-2.035 12 9

geekscrapy

geekscrapy's starred repositories

dive

acme.sh

tqdm

vis

lnav

angle-grinder

oletools