Discover SentineLabs/aevt_decompile Open Source project

Stars
62
Rank 490,914 (Top 10 %)
Language
Objective-C
Created almost 4 years ago
Updated almost 4 years ago

SentineLabs

There are no reviews yet. Be the first to send feedback to the community and the maintainers!

This is a work-in-progress command line tool for reversing run-only AppleScripts. It will help parse the output of applescript-disassembler.py into something more human-readable.

AlphaGolang

IDApython Scripts for Analyzing Golang Binaries

Python

577

SentinelLabs_RevCore_Tools

The Windows Malware Analysis Reversing Core Tools

PowerShell

XProtect-Malware-Families

Mapping XProtect's obfuscated malware family names to common industry names.

YARA

S1QL-Queries

macos-ttps-yara

A ruleset to find potentially malicious code in macOS malware samples

YARA

Memloader

Memory Loader Open Source Project by Sentinel-Labs.

C++

PowerTrick

This is a repository for the public blog with Labs indicators of compromise and code

PowerShell

log4j_response

Python

Cl0p-ELF-Decryptor

Python3 script which decrypts files encrypted by flawed Cl0p ELF variant.

Python

TrickBot-Anchor

This is a repository for the public blog with Labs indicators of compromise.

aeon

Repository containing Aeon Timeline templates and example projects

SolarWinds_Countermeasures

This tool is designed to identify processes, services, and drivers that SUNBURST attempts to identify on the victim's machine.

TrickBot-Deobfuscator

Code and data related to TrickBot-Deobfuscator blog

Python

Gamaredon-APT

This is a collection of relevant indicators of compromise for the main blog.

Yara

Public SentinelLabs Yara Rules

YARA

Shadowpad

Technical Indicators for SentinelLabs ShadowPad research

IOCs

A Collection of IOC's

aoqin_dragon

Python

meteor-express

Hashes and Yara hunting rules for MeteorExpress Wiper

YARA

Crypt1_IOCs

Massive unpacking of CryptOne samples

SentineLabs/aevt_decompile

SentineLabs

Reviews

Repository Details

More Repositories