
LiME
Kernel module for volatile memory acquisition from Linux and Android devices, producing forensically sound captures to disk or over the network.

Kernel module for volatile memory acquisition from Linux and Android devices, producing forensically sound captures to disk or over the network.

Reverse engineering analysis of Dropper GCleaner, a malware that uses a resilient C2 infrastructure, kernel driver loading, PowerShell/Conhost…

A canary designed to minimize the impact from certain Ransomware actors


BOF to run PE in Cobalt Strike Beacon without console creation

C library for stack unwinding and backtrace generation, supporting multiple architectures and operating systems, with build and regression testing…

Library for unwinding processor call stacks, supporting multiple architectures and operating systems, with build and regression testing instructions.