
drakvuf-sandbox
Automated hypervisor-level malware analysis sandbox with agentless guest introspection, web-based result exploration, and guided installer for…

Automated hypervisor-level malware analysis sandbox with agentless guest introspection, web-based result exploration, and guided installer for…

Evidence-focused malware reverse engineering with deep PE/.NET inspection, Ghidra reconstruction, AI cross-checks, YARA, and ELF debugging

Python Decoders for Common Remote Access Trojans

Free educational content on reverse engineering and malware analysis from the FLARE team

Malware Configuration And Payload Extraction

Parses public sandbox detonation reports to produce threat hunting intelligence, organizes findings via MITRE ATT&CK, assembles IOCs, and generates…

Modular malware analysis artifact collection and correlation framework

SVG Analysis and generation tools for commonly seen SVG attachment phishing

Live memory analysis detecting malware IOCs in processes, modules, handles, tokens, threads, .NET assemblies, memory address space and environment…

Scans a list of raccoon servers from Tria.ge and extracts the config

Log4Shell(CVE-2021-45046) Sandbox Signature