How this analysis was created: This summary and feature list are AI-generated from collected project material and can contain mistakes. Stars, license and language are imported from GitHub. Inclusion does not mean that we have tested or audited this project. Check the source documentation for any feature you depend on. Learn more on our About page.
Malware Configuration And Payload Extraction
The main features of kevoreilly/capev2 are: Security Lab Environments, Yara Rule Collections, Malware Analysis, Malware Analysis Sandboxes, Sandboxing and Reverse Engineering, Security And Forensics.
Projects with overlapping indexed features include: radareorg/radare2 — Radare2 is a comprehensive framework for reverse engineering and analyzing compiled software. It provides a… stamparm/maltrail — Maltrail is a malicious traffic detection system used for network intrusion detection. It consists of a network… korelogicsecurity/mastiff — Malware static analysis framework. nationalsecurityagency/ghidra — Ghidra is a software reverse engineering suite designed to analyze compiled binaries and reconstruct program logic… eset/malware-ioc — Indicators of Compromises (IOC) of our various investigations. fireeye/stringsifter — A machine learning tool that ranks strings based on their relevance for malware analysis.
Ghidra is a software reverse engineering suite designed to analyze compiled binaries and reconstruct program logic without access to original source code. It provides an interactive environment for disassembly and decompilation, utilizing a platform-independent intermediate representation to maintain consistency across diverse hardware architectures. The framework supports automated binary analysis through programmatic routines, enabling the investigation of complex code patterns and security indicators. The platform distinguishes itself through a modular architecture that allows for extensiv
Radare2 is a comprehensive framework for reverse engineering and analyzing compiled software. It provides a command-line environment designed for disassembling, debugging, and patching binary executables across a wide range of processor architectures and operating systems. The system distinguishes itself through a modular, plugin-based architecture that supports cross-platform analysis and automated workflows. It utilizes memory-mapped file access to enable efficient structural inspection and modification of binaries without requiring full file loads. By lifting machine instructions into a un
Maltrail is a malicious traffic detection system used for network intrusion detection. It consists of a network intrusion sensor for monitoring interfaces, a threat intelligence aggregator for syncing blacklists, and a detection engine that identifies security threats through signature matching and heuristic attack patterns. The system distinguishes itself through a distributed sensor architecture that collects traffic data from multiple remote probes and forwards events to a central analysis server. It employs heuristic behavioral analysis to identify unknown threats, such as port scanning o
