Pinned

1. runpedmp runpedmp Public

   RunPE dump - I wrote this to have better control over the analysis of malwares. I can stop and analysis malware when it uses some of the API's i hook and to dump the memory while it is using RunPE/…

   C++ 10 10

2. Sulo Sulo Public

   Forked from WithSecureOpenSource/Sulo

   Dynamic instrumentation tool for Adobe Flash Player built on Intel Pin

   C++ 5 3

3. InstumentOffice InstumentOffice Public

   Set of windbg breakpoints and notes for instrumenting Microsoft Office VBA engine.

   4 5

4. DecryptEKbinary DecryptEKbinary Public

   Decrypt the initial dropper of various exploit kits

   C++ 10 4

5. PackerAttacker PackerAttacker Public

   Forked from BromiumLabs/PackerAttacker

   C++ application that uses memory and code hooks to detect packers

   C++ 2

6. sysdigfalcorules sysdigfalcorules Public

   sysdig Falco Rules

   1