eversinc33
Follow
๐ Blue Team
The FLARE team's open-source tool to identify capabilities in executable files.
Sysmon configuration file template with default high-quality event tracing
Binary analysis and management framework
MISP (core software) - Open Source Threat Intelligence and Sharing Platform
Domain name permutation engine for detecting homograph phishing attacks, typo squatting, and brand impersonation
Quickly debug shellcode extracted during malware analysis
Please no pull requests for this repository. Thanks!
Scans a given process. Recognizes and dumps a variety of potentially malicious implants (replaced/injected PEs, shellcodes, hooks, in-memory patches).
A collection of software installations scripts for Windows systems that allows you to easily setup and maintain a reverse engineering environment on a VM.
Rapidly Search and Hunt through Windows Forensic Artefacts
A suite of Tools to aid Incidence Response and Live Forensics for - Windows (Powershell) | Linux (Bash) | MacOS (Shell)
Program for determining types of files for Windows, Linux and MacOS.
Microsoft Sentinel SOC Operations
Enumerate various traits from Windows processes as an aid to threat hunting