How this analysis was created: This summary and feature list are AI-generated from collected project material and can contain mistakes. Stars, license and language are imported from GitHub. Inclusion does not mean that we have tested or audited this project. Check the source documentation for any feature you depend on. Learn more on our About page.
Behavior based monitoring and hunting tool built in C# leveraging ETW tracing. Blue teamers can use this tool to detect and respond to potential Cobalt Strike beacons. Red teamers can use this tool to research ETW bypasses and discover new processes that behave like beacons.
Binary code static analyser, with IDA integration. Performs value and taint analysis, type reconstruction, use-after-free and double-free detection
IDAPython tool for creating automatic C++ virtual tables in IDA Pro
Artifact analysis tools by JPCERT/CC Analysis Center
The main features of jpcertcc/aa-tools are: IDA Pro Plugins, Detection Tools.
Projects with overlapping indexed features include: 3lp4tr0n/beaconhunter — Behavior based monitoring and hunting tool built in C# leveraging ETW tracing. Blue teamers can use this tool to… a1ext/labeless. airbus-seclab/bincat — Binary code static analyser, with IDA integration. Performs value and taint analysis, type reconstruction,… alexhude/friend. alexhude/uemu — Tiny cute emulator plugin for IDA based on unicorn. 0xgalz/virtuailor — IDAPython tool for creating automatic C++ virtual tables in IDA Pro.