gleeda Goto Github PK

block-parser

Parser for Windows PowerShell script block logs

boombox

Automatic deployment of Cuckoo Sandbox malware lab using Packer and Vagrant

capa

The FLARE team's open-source tool to identify capabilities in executable files.

capa-rules

Standard collection of rules for capa: the tool for enumerating the capabilities of programs

carlpully-volatility

A collection of Volatility Framework plugins.

climate

content-irpowerforensics

PowerForensics provides an all in one platform for live disk forensic analysis

creddump

Automatically exported from code.google.com/p/creddump

detekt

Malware triaging tool

distorm

Powerful Disassembler Library For x86/AMD64

epa-climate-change

flare-floss

FireEye Labs Obfuscated String Solver - Automatically extract obfuscated strings from malware.

flare-wmi

gargoyle

A memory scanning evasion technique

gleeda.github.com

lime

LiME (formerly DMD) is a Loadable Kernel Module (LKM), which allows the acquisition of volatile memory from Linux and Linux-based devices, such as those powered by Android. The tool supports acquiring memory either to the file system of the device or over the network. LiME is unique in that it is the first tool that allows full memory captures from Android devices. It also minimizes its interaction between user and kernel space processes during acquisition, which allows it to produce memory captures that are more forensically sound than those of other tools designed for Linux memory acquisition.

malboxes

Builds malware analysis Windows VMs so that you don't have to.

memtriage

Allows you to quickly query a Windows machine for RAM artifacts

mirai-source-code

Leaked Mirai Source Code for Research/IoC Development Purposes

misc-scripts

misc scripts

old-schoolwork

old programs and scripts from various courses

openpyxl

clone of openpyxl

osx-vm-templates

macOS templates for Packer and VeeWee.

pdbparse

Automatically exported from code.google.com/p/pdbparse

presentations

python-pachyderm

Python client for Pachyderm

rdp-replay

Replay RDP traffic from PCAP

ssh-chat

Chat over SSH.

subtee-gits-backups

subTee gists code backups

syncthing

Open Source Continuous File Synchronization