airbus-cert Goto Github PK

awesome-ida-x64-olly-plugin

A curated list of IDA x64DBG, Ghidra and OllyDBG plugins.

bodyfile

A bodyfile parsing library

cacdec

The hidden mstsc recorder player

comida

An IDA Plugin that help analyzing module that use COM

dirtypipe-ebpf_detection

An eBPF detection program for CVE-2022-0847

dnmisp

dnMisp is a simple, MISP Rest API consumer .Net Standard 2.0 library.

dnyara

A multi-platform .Net wrapper library for the native Yara library.

etl-parser

Event Trace Log file parser in pure Python

etwbreaker

An IDA plugin to deal with Event Tracing for Windows (ETW)

ghidra

Ghidra is a software reverse engineering (SRE) framework

grpc-gateway

gRPC to JSON proxy generator following the gRPC HTTP spec

idaplugins-list

A list of IDA Plugins

invoke-bof

Load any Beacon Object File using Powershell!

libpcap

the LIBpcap interface to various kernel packet capture mechanism

misp

MISP (core software) - Open Source Threat Intelligence Platform (formely known as Malware Information Sharing Platform)

misp-stix-converter

A utility repo to assist with converting between MISP and STIX formats

mispgo

Golang library for MISP

mispy

Another MISP module for Python

nttracecontrol

Powershell Event Tracing Toolbox

pstrace

Trace ScriptBlock execution for powershell v2

regrippy

A modern Python-3-based alternative to RegRipper

skyblue.team

Our website

splunk-etw

A Splunk Technology Add-on to forward filtered ETW events.

splunk_antlr_spl

sysmon-config

Sysmon configuration file template with default high-quality event tracing

sysmoncommon

The common parts of the Sysinternals Sysmon tool shared between the Windows and Linux versions.

sysmonforlinux

timeliner

A rewrite of mactime, a bodyfile reader

tree-sitter

An incremental parsing system for programming tools

tree-sitter-powershell

Powershell grammar for tree-sitter