Behavior based monitoring and hunting tool built in C# leveraging ETW tracing. Blue teamers can use this tool to detect and respond to potential Cobalt Strike beacons. Red teamers can use this tool to research ETW bypasses and discover new processes that behave like beacons.
Binary code static analyser, with IDA integration. Performs value and taint analysis, type reconstruction, use-after-free and double-free detection
IDAPython tool for creating automatic C++ virtual tables in IDA Pro
Artifact analysis tools by JPCERT/CC Analysis Center
Principalele funcționalități ale jpcertcc/aa-tools sunt: IDA Pro Plugins, Detection Tools.
Alternativele open-source pentru jpcertcc/aa-tools includ: 3lp4tr0n/beaconhunter — Behavior based monitoring and hunting tool built in C# leveraging ETW tracing. Blue teamers can use this tool to… a1ext/labeless. airbus-seclab/bincat — Binary code static analyser, with IDA integration. Performs value and taint analysis, type reconstruction,… alexhude/friend. alexhude/uemu — Tiny cute emulator plugin for IDA based on unicorn. 0xgalz/virtuailor — IDAPython tool for creating automatic C++ virtual tables in IDA Pro.