Behavior based monitoring and hunting tool built in C# leveraging ETW tracing. Blue teamers can use this tool to detect and respond to potential Cobalt Strike beacons. Red teamers can use this tool to research ETW bypasses and discover new processes that behave like beacons.
Binary code static analyser, with IDA integration. Performs value and taint analysis, type reconstruction, use-after-free and double-free detection
IDAPython tool for creating automatic C++ virtual tables in IDA Pro
Artifact analysis tools by JPCERT/CC Analysis Center
الميزات الرئيسية لـ jpcertcc/aa-tools هي: IDA Pro Plugins, Detection Tools.
تشمل البدائل مفتوحة المصدر لـ jpcertcc/aa-tools: 3lp4tr0n/beaconhunter — Behavior based monitoring and hunting tool built in C# leveraging ETW tracing. Blue teamers can use this tool to… a1ext/labeless. airbus-seclab/bincat — Binary code static analyser, with IDA integration. Performs value and taint analysis, type reconstruction,… alexhude/friend. alexhude/uemu — Tiny cute emulator plugin for IDA based on unicorn. 0xgalz/virtuailor — IDAPython tool for creating automatic C++ virtual tables in IDA Pro.