Repository of yara rules

APT & CyberCriminal Campaign Collection

YARA signature and IOC database for my scanners and tools

Android Application Identifier for Packers, Protectors, Obfuscators and Oddities - PEiD for Android

Indicators of Compromises (IOC) of our various investigations

Living Off The Land Drivers

A static analyzer for PE executables.

Guidance for mitigation web shells. #nsacyber

PEframe is a open source tool to perform static analysis on Portable Executable malware and malicious MS Office documents.

sandbox approach for malware developers and red teamers to test payloads against detection mechanisms before deployment

A repository of code signing certificates known to have been leaked or stolen, then abused by threat actors

Set of Yara rules for finding files using magics headers