mlodic

ursnif_beacon_decryptor

Ursnif beacon decryptor

pdfid

pewpew

:star: :star: :star: Build your own IP Attack Maps with SOUND!

cbfeeds

Carbon Black Feeds

client-python

OpenCTI Python client

Cortex-Analyzers

Cortex Analyzers Repository

crl-monitor

CRL Monitor - X.509 Certificate Revocation List monitoring and X.509/Subject caching

django-rest-durin

Per client token authentication for django rest framework

dnstwist

Domain name permutation engine for detecting homograph phishing attacks, typo squatting, and brand impersonation

CobaltStrike

CobaltStrike's source code

IntelOwl

Intel Owl: analyze files, domains, IPs in multiple ways from a single API at scale

iris-intelowl-module

IntelOwl IRIS module

knock

Knock Subdomain Scan

logstash-filter-dns

magika

Detect file content types with deep learning

misp-warninglists

Warning lists to inform users of MISP about potential false-positives or other information in indicators

nginx-ui

Nginx UI allows you to access and modify the nginx configurations files without cli.

oletools

oletools - python tools to analyze MS OLE2 files (Structured Storage, Compound File Binary Format) and MS Office documents, for malware analysis, forensics and debugging.

parsedmarc

A Python package and CLI for parsing aggregate and forensic DMARC reports

peepdf

Powerful Python tool to analyze PDF documents

pefile

pefile is a Python module to read and work with PE (Portable Executable) files

pyintelowl

Python module & CLI for Intel Owl.

PyPDNS

Client API to query any Passive DNS implementation following the Passive DNS - Common Output Format.

qiling

Qiling Advanced Binary Emulation framework

quark-engine

Malware (Analysis | Scoring System)

telfhash

Symbol hash for ELF files

TheHive

TheHive: a Scalable, Open Source and Free Security Incident Response Platform

XLMMacroDeobfuscator

Extract and Deobfuscate XLM macros (a.k.a Excel 4.0 Macros)

yara

The pattern matching swiss knife

Yara-Rules

Repository of YARA rules made by McAfee ATR Team