Intezer Labs's Projects
Intezer plugin for Volatility 3 to conduct memory dump analysis.
LIEF - Library to Instrument Executable Formats
Automatic pre-built packages
Easy-to-use live forensics toolbox for Linux endpoints
This repository contains relevant samples and data related to "Malware Reverse Engineering for Beginners" articles.
Detects code differentials between executables in disk and the corresponding processes/modules in memory
Clusters and elements to attach to MISP events or attributes (like threat actors)
MoP - "Master of Puppets" - Advanced malware tracking framework
low level netlink library for rust
pefile is a Python module to read and work with PE (Portable Executable) files
Phantom Cyber App for Intezer Analyze. https://analyze.intezer.com/
pure python ssdeep
a Python library to communicate with an instance of Phil Harvey's excellent ExifTool command-line application.
Minimal PyPI server for uploading & downloading packages with pip/easy_install
A docker image where python installed with datastax's cassandra driver
Python logging handler for Logstash.
Library for Unix users and groups in Rust.
IDAPython Made Easy
A safe, transparent way to share and deploy scikit-learn models.
ssdeep based clustering tool
SSDEEP hash lib in Golang
An example for implementation of ssdeep similarity search optimized with elasticsearch