tcpflow

TCPFLOW 1.5.0 Downloads directory: http://digitalcorpora.org/downloads/tcpflow/ Installation Most common GNU/Linux distributions ship tcpflow in their repositories. So on Debian/Ubuntu/etc you can say sudo apt-get install tcpflow and on Fedora/RedHat/CentOS/etc you can say sudo dnf install tcpflo...

distro

REMnux 배포판 저장소 이 저장소에는 REMnux 배포판용 보조 파일과 배포판이 Launchpad의 REMnux 패키지 저장소에서 설치하는 Debian 패키지의 소스 파일이 포함되어 있습니다. 저장소 구조 files/ REMnux 배포판에서 사용하는 보조 파일로, 다음을 포함합니다: 설치 중 배포되는 도우미 스크립트 및 유틸리티 복원력을 위한 의존성 미러 복사본 ppasrc/ REMnux PPA에 게시된 Debian 패키지의 소스 패키지입니다. 각 하위 디렉터리에는 특정 도구의 패키징 파일이 포함되어 있으며, Ubuntu...

Office-Malware-Forensics-Lab-REMnux-Static-Analysis

Office Malware Forensics Lab — REMnux Static Analysis Static analysis of two malicious Office files, done entirely inside an isolated REMnux VM. Nothing was ever executed — just inspected. Setup REMnux VM, no shared folders with the host Tools: sha256sum, file, unzip, and the oletools suite oleid...

windows-malware-behavioral-analysis

REMnux 및 FLARE-VM을 사용한 행동 기반 악성코드 분석 격리된 실험실 내에서 행동 분석 기법을 사용하여 의심스러운 Windows 실행 파일을 안전하게 분석할 수 있는 방법을 보여주는 실용적인 Blue Team 악성코드 조사입니다. 이 프로젝트는 악성코드 소스 코드를 리버스 엔지니어링하는 대신 런타임 동작 관찰, 호스트 및 네트워크 텔레메트리 수집, 침해 지표IOC 추출, 공격자 활동을 MITRE ATT&CK 프레임워크에 매핑하는 데 중점을 둡니다. 목표 안전한 악성코드 분석 실험실 구축 실행 중 악성코드 동작 관찰...

Introducing Linux Support for FakeNet-NG: FLARE’s Next Generation Dynamic Network Analysis Tool

Introduction In 2016, FLARE introduced FakeNet-NG, an open-source network analysis tool written in Python. FakeNet-NG allows security analysts to observe and interact with network applications using standard or custom protocols on a single Windows host, which is especially useful for malware...

Introducing Linux Support for FakeNet-NG: FLARE’s Next Generation Dynamic Network Analysis Tool

Introduction In 2016, FLARE introduced FakeNet-NG, an open-source network analysis tool written in Python. FakeNet-NG allows security analysts to observe and interact with network applications using standard or custom protocols on a single Windows host, which is especially useful for malware...

Introducing Linux Support for FakeNet-NG: FLARE’s Next Generation Dynamic Network Analysis Tool

Introduction In 2016, FLARE introduced FakeNet-NG, an open-source network analysis tool written in Python. FakeNet-NG allows security analysts to observe and interact with network applications using standard or custom protocols on a single Windows host, which is especially useful for malware...

Reverse Engineering Malicious Software: REMnux Distro

REMnux v6 – A Linux Toolkit for Reverse-Engineering and Analyzing Malware – has been released. REMnux v6 updates the tools that were present in the earlier revisions of the distro and introduces several new ones. Moreover, it implements major architectural changes behind the scenes to allow REMnu...

[REMnux] A Linux Distribution for Malware Analysis

REMnux incorporates a number of tools for analyzing malicious executables that run on Microsoft Windows, as well as browser-based malware, such as Flash programs and obfuscated JavaScript. This popular toolkit includes programs for analyzing malicious documents, such PDF files, and utilities for...

New Version of REMnux Malware-Analysis Linux Distribution Released

A new version of the REMnux specialized Linux distribution has been released, and it now includes a group of new tools for reverse-engineering malware. The new additions include a tool for memory forensics as well as one for analyzing potentially malicious PDFs. REMnux was first released last yea...

REMnux: A Linux Distribution for Reverse-Engineering Malware

REMnux: A Linux Distribution for Reverse-Engineering Malware REMnux is a lightweight Linux distribution for assisting malware analysts in reverse-engineering malicious software. The distribution is based on Ubuntu and is maintained by Lenny Zeltser. REMnux is designed for running services that ar...

New Linux OS REMnux Designed For Reverse Engineering Malware

A security expert has released a stripped-down Ubuntu distribution designed specifically for reverse-engineering malware. The OS, called REMnux, includes a slew of popular malware-analysis, network monitoring and memory forensics tools the comprise a very powerful environment for taking apart...