csvl/SEMA: SEMA is based on angr, a symbolic execution engine used to extract API calls. Especially, we extend ANGR with strategies to create representative signatures based on System Call Dependency graph (SCDG). Those SCDGs can be exploited in machine learning modules to do classification/detection.

Code analyzer

Analyzes VBA code to generate visual call graphs and highlights potential malicious keywords

Malware analyzer

A tool to extract configuration and payload from malware by analyzing its behavior in a sandboxed environment.

Malware analyzer

An analysis repository providing scripts, signatures, and IOCs for detecting and analyzing malware.

Malware analysis tool

An analysis tool that reveals anti-debugging and anti-VM techniques used by malware samples.

Malware analyzer

An executable file analysis tool that identifies capabilities and potential malicious behaviors.

Firmware analyzer

Analyzes firmware vulnerabilities using concolic analysis and function clustering

Malware analyzer

An IDA plugin for creating and analyzing function call graphs of malware

Malware analyzer

A collection of tools and scripts for analyzing malware, reverse engineering malware, and decrypting encrypted data

File analyzer

An asynchronous analysis system for suspicious files

Malware analyzer

An all-in-one malware analysis tool that provides detailed information about suspicious files and executables.

Malware analyzer

An Android malware analysis system designed to collect and analyze malware signatures using machine learning techniques.

System Auditor

A tool for gathering and recording information from live Linux systems for forensic analysis

Code analyzer

Identifies and reports on patterns in ECMAScript/JavaScript code

Error Detector

Automated tool to detect errors in security monitoring and measure effectiveness of SIEM rules against various behaviors.

Packet analyzer

An analysis tool for packet capture files using Suricata and Zeek

Similar projects