oversight
rakosn1cek/oversightTerminal-based security auditor that statically analyzes shell scripts and commands, dynamically enforces sandboxing via Linux Landlock, and provides…
code-analysisdevsecopsdynamic-analysis-sandboxing+7
39
rakosn1cek/oversightTerminal-based security auditor that statically analyzes shell scripts and commands, dynamically enforces sandboxing via Linux Landlock, and provides…
mandiant/capaRule-based static and dynamic analysis tool that identifies capabilities in PE, ELF, .NET, and shellcode files, mapping them to MITRE ATT&CK…
alexandreborges/malwoverviewMulti-engine threat hunting tool for triaging malware samples, URLs, IPs, and IOCs across 20+ services including VirusTotal, Hybrid Analysis, and…
srixivas/pcapxray❄️ PcapXray - A Network Forensics Tool - To visualize a Packet Capture offline as a Network Diagram including device identification, highlight…
mvt-project/androidqfPortable forensic acquisition tool for Android devices that extracts SMS, APKs, system logs, and process lists to identify spyware and compromise…
huntdownproject/koodousfinderA simple tool to allows users to search for and analyze android apps for potential security threats and vulnerabilities
insane-forensics/drovorub-huntA tool to assist with network-based hunting for GRU's Drovorub malware c2
m10ust/machscopemacOS IPC, launchd, Mach-O, and trust relationship explorer — zero-dependency terminal-native forensic tool
virustotal/yaraRule-based pattern matching engine for identifying and classifying malware samples using textual and binary patterns, with Python bindings and…
virustotal/yara-xRust-based pattern matching engine for malware researchers. Create YARA rules with textual/binary patterns, wildcards, and regex to identify and…
tomchop/malcomAnalyzes network traffic to detect C&C servers, peer-to-peer networks, and DNS fast-flux infrastructures, cross-referencing with known malware…
osirislab/awesome-rust-securityCurated list of awesome projects and resources related to Rust and computer security
pandaadir05/ghostDetects process injection and memory manipulation used by malware. Finds RWX regions, shellcode patterns, API hooks, thread hijacking, and process…
3lp4tr0n/beaconhunterDetect and respond to Cobalt Strike beacons using ETW.
c3rb3ru5d3d53c/mwcfgA Feature Rich Modular Malware Configuration Extraction Utility for MalDuck
malpedia/malpedia-flossedFLARE floss applied to all unpacked+dumped samples in Malpedia, pre-processed for further use.
cristianzsh/amcache-evilhunterParse and analyze a Windows Amcache.hve registry hive, VirusTotal integration.
corelight/pingbackZeek package and Suricata rules to detect ICMP ping tunnels associated with the Pingback C2 malware, enabling network defense against covert…