malware-detection

Scans all running processes. Recognizes and dumps a variety of potentially malicious implants (replaced/implanted PEs, shellcodes, hooks, in-memory patches).

anti-malware malware-analysis memory-forensics malware-detection pe-sieve

Updated Sep 2, 2023
C

Powershell module that can be used by Blue Teams, Incident Responders and System Administrators to hunt persistences implanted in Windows machines. Official Twitter/X account @PersistSniper. Made with ❤️ by @last0x00 and @dottor_morte

windows registry powershell persistence incident-response powershell-script techniques powershell-module malware-detection

Updated Aug 19, 2023
PowerShell

airbnb / binaryalert

Star

BinaryAlert: Serverless, Real-time & Retroactive Malware Detection.

aws security lambda serverless terraform yara malware-detection

Updated Dec 8, 2022
Python

eliasgranderubio / dagda

Star

a tool to perform static analysis of known vulnerabilities, trojans, viruses, malware & other malicious threats in docker images/containers and to monitor the docker daemon and running docker containers for detecting anomalous activities

docker security static-analysis vulnerabilities detecting-anomalous-activities malware-detection

Updated May 23, 2023
Python

JPCERTCC / EmoCheck

Star

Emotet detection tool for Windows OS

security malware-detection emotet

Updated Jun 11, 2023
C++

reversinglabs / reversinglabs-yara-rules

Star

ReversingLabs YARA Rules

reverse-engineering yara yara-rules ransomware-prevention malware-detection ransomware-detection indicators-of-compromise yara-signatures

Updated Jun 7, 2023
YARA

horsicq / XAPKDetector

Sponsor

Star

APK/DEX detector for Windows, Linux and MacOS.

android reverse-engineering apk malware-analysis malware-research hacktoberfest apk-parser malware-detection apktools hacktoberfest2022

Updated Sep 3, 2023
C++

horsicq / Nauz-File-Detector

Sponsor

Star

Linker/Compiler/Tool detector for Windows, Linux and MacOS.

detect reverse-engineering signature malware-analysis malware-research hacktoberfest malware-detection hacktoberfest2022

Updated Sep 3, 2023
C++

chenerlich / FCL

Star

FCL (Fileless Command Lines) - Known command lines of fileless malicious executions

command-line incident-response malware threat-hunting malware-analysis malware-detection fcl file-less

Updated Apr 8, 2021

PUNCH-Cyber / stoq

Star

An open source framework for enterprise level automated analysis.

framework malware-analyzer malware-analysis malware-research automation-framework yara security-automation malware-detection

Updated Jun 27, 2022
Python

0xDanielLopez / TweetFeed

Star

TweetFeed collects Indicators of Compromise (IOCs) shared by the infosec community at Twitter. Here you will find malicious URLs, domains, IPs, and SHA256/MD5 hashes.

osint malware phishing malware-research phishing-attacks blueteam phishing-sites malware-detection phishing-detection