How this analysis was created: This summary and feature list are AI-generated from collected project material and can contain mistakes. Stars, license and language are imported from GitHub. Inclusion does not mean that we have tested or audited this project. Check the source documentation for any feature you depend on. Learn more on our About page.
x86 emulation and shellcode detection
The main features of buffer/libemu are: Malware Analysis.
Projects with overlapping indexed features include: accidentalrebel/mbcscan — Scans a malware file and lists down the related MBC (Malware Behavior Catalog) details. activecm/rita — Real Intelligence Threat Analytics (RITA) is a framework for detecting command and control communication through… adamtaguirov/ida-practical-cheatsheet — Few use-cases of IDA Python (work in progress). advanced-threat-research/darkside-config-extract. advanced-threat-research/iocs — Repository containing IOCs, CSV and MISP JSON from our blogs. a0rtega/pafish — Pafish is an anti-analysis sandbox detector and virtualization environment tester. It serves as a diagnostic utility…
Scans a malware file and lists down the related MBC (Malware Behavior Catalog) details.
Real Intelligence Threat Analytics (RITA) is a framework for detecting command and control communication through network traffic analysis.
Few use-cases of IDA Python (work in progress).
Pafish is an anti-analysis sandbox detector and virtualization environment tester. It serves as a diagnostic utility to identify if a system is running inside a virtual machine or a malware analysis sandbox by executing common anti-analysis techniques. The tool validates the effectiveness of various evasion methods and supports research into sandbox detection. It tests whether a target system can be recognized as a virtualized environment to help improve the stealth of malware analysis environments. Detection is achieved through a variety of behavioral checks, including hardware artifact ana