yarGen
ace-firefist
| yarGen | ace-firefist | |
|---|---|---|
| 1 | 1 | |
| 1,453 | 16 | |
| - | - | |
| 5.5 | 5.3 | |
| 4 months ago | about 1 year ago | |
| Python | Python | |
| GNU General Public License v3.0 or later | GNU General Public License v3.0 only |
Stars - the number of stars that a project has on GitHub. Growth - month over month growth in stars.
Activity is a relative number indicating how actively a project is being developed. Recent commits have higher weight than older ones.
For example, an activity of 9.0 indicates that a project is amongst the top 10% of the most actively developed projects that we are tracking.
yarGen
-
Tasked with building a malware analysis / threat hunting machine . Need feedback
Yara rules generator - Generate yara rules based on a set of malware sample, https://github.com/Neo23x0/yarGen
ace-firefist
-
Initial acess simulation tests
To test initial access with file execution can try something like https://github.com/dobin/ace-firefist
What are some alternatives?
yara - The pattern matching swiss knife
attack-stix-data - STIX data representing MITRE ATT&CK
drakvuf-sandbox - DRAKVUF Sandbox - automated hypervisor-level malware analysis system
dumpulator - An easy-to-use library for emulating memory dumps. Useful for malware analysis (config extraction, unpacking) and dynamic analysis in general (sandboxing).
atomic-red-team - Small and highly portable detection tests based on MITRE's ATT&CK.
teleRAT - Telegram RAT written in Python
pyWhat - 🐸 Identify anything. pyWhat easily lets you identify emails, IP addresses, and more. Feed it a .pcap file or some text and it'll tell you what it is! 🧙♀️
centaur.04 - Lightweight malware analysis tool
CAPEv2 - Malware Configuration And Payload Extraction
aurora - Malware similarity platform with modularity in mind.
theZoo - A repository of LIVE malwares for your own joy and pleasure. theZoo is a project created to make the possibility of malware analysis open and available to the public.