ZeroScout

🦅 ZeroScout Il Cacciatore di Minacce Autonomo Locale e Cloud "Non limitarti a scansionare file. Visualizza il campo di battaglia." 🇹🇷 Türkçe Dökümantasyon İçin Tıklayın Read in Turkish 🚀 Cos'è ZeroScout? ZeroScout è un framework di threat hunting di nuova generazione progettato per Incident...

peframe

======= peframe peframe is a open source tool to perform static analysis on Portable Executable malware and generic suspicious file. It can help malware researchers to detect packer, xor, digital signature, mutex, anti debug, anti virtual machine, suspicious sections and functions, macro and much...

gimphash

gimphash gimphash ist eine vorgeschlagene Methode, um ein imphash-Äquivalent für Go-Binaries zu berechnen. Der Name steht für G o-imp ort-hash. Golang-Binaries enthalten ihre Abhängigkeiten als Teil der ausführbaren Datei. Diese Abhängigkeiten umfassen sowohl Pakete der Standardbibliothek als auc...

YARA webinar follow up

If you read my previous blogpost Hunting APTs with YARA then you probably know about the webinar we conducted on March 31, 2020, showcasing some of our experience in developing and using YARA rules for malware hunting. In case you missed the webinar - or if you attended and want to re-watch it -...

Munin - Online Hash Checker For Virustotal And Other Services

Munin is a online hash checker utility that retrieves valuable information from various online sources The current version of Munin queries the following services: Virustotal Malshare HybridAnalysis Note: Munin is based on the script "VT-Checker", which has been maintained in the LOKI repository...