nganhkhoa/mether049-malware
1
0
Fork 0
mirror of https://github.com/nganhkhoa/malware.git synced 2024-06-10 21:32:07 +07:00
Code Issues Projects Releases Wiki Activity

Update malware-analysis_ref_and_memo.md

Browse Source
This commit is contained in:
mether049 2020-02-03 23:55:13 +09:00 committed by GitHub
parent 7842648bdf
commit 1376280312
No known key found for this signature in database
GPG Key ID: 4AEE18F83AFDEB23
1 changed files with 23 additions and 0 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

23
malware-analysis_ref_and_memo.md
View File

@ -3,6 +3,14 @@
[DFIR TRAINING(TOOLS)](https://www.dfir.training/dfirtools/advanced-search) [DFIR TRAINING(TOOLS)](https://www.dfir.training/dfirtools/advanced-search)
- infographicsやツールのチートシート<br> - infographicsやツールのチートシート<br>
[DFIR TRAINING(RESOUCES-Downloads-Infographics & Cheet Sheets)](https://www.dfir.training/resources/downloads/cheatsheets-infographics) [DFIR TRAINING(RESOUCES-Downloads-Infographics & Cheet Sheets)](https://www.dfir.training/resources/downloads/cheatsheets-infographics)
### OS/VM
- [FLARE VM](https://github.com/fireeye/flare-vm)<br>
FireEye社が提供するマルウェア解析, DFIR, ペネトレーションテストに特化したWindowsベースのディストリビューション<br>
Practical Malware Analysis Labsが同梱<br>
- [REMnux](https://remnux.org/)<br>
SANSが提供するリバースエンジニアリング，マルウェア解析に特化したUbuntuベースのディストリビューション<br>
- [Tsurugi Linux](https://tsurugi-linux.org/index.php)<br>
DFIR,マルウェア解析，OSINTに特化したUbuntuベースのディストリビューション<br>
### Static Analysis and Debug tools ### Static Analysis and Debug tools
※空欄は調査中(更新予定) ※空欄は調査中(更新予定)
@ -83,6 +91,21 @@
### Threat hunting ### Threat hunting
- EQL - EQL
### .NET analysis
- [dnspy](https://github.com/0xd4d/dnSpy)<br>
.NETデコンパイラ,C#やVBで作成された実行ファイルを高精度でデコンパイルする
### Utilities
- PeBear
- PeStudio
- ResourceHacker
- PEiD
- 010 Editor
- Process Hacker
- RegShot
- RegistryChangesView
- CyberChef
### Online Sandbox ### Online Sandbox
|name|site|remarks| |name|site|remarks|
|:-|:-|:-| |:-|:-|:-|