Threat Pursuit Virtual Machine (VM): A fully customizable, open-sourced Windows-based distribution focused on threat intelligence analysis and hunting designed for intel and malware analysts as well as threat hunters to get up and running quickly.

FireEye Alert json files to MISP Malware information sharing plattform (Alpha)

Python API bindings for FireEye Products

Extracts the Timeline of a Redline parsed sqlite database so it can be used e.g. in an ELK stack.

EmailScanner is an integration application in python that uses `exchangelib` to process mail items in Microsoft exchange.

PowerShell implementation of FireEyeHX API v3

Publicly available threat intelligence reports

Assemblyline 4 Obfuscated string solver

Parses the Redline CSV output in a csv that is importable by timesketch