diff --git a/malware-analysis_ref_and_memo.md b/malware-analysis_ref_and_memo.md index ed72836..68dac8c 100644 --- a/malware-analysis_ref_and_memo.md +++ b/malware-analysis_ref_and_memo.md @@ -268,7 +268,9 @@ DFIR,マルウェア解析,OSINTに特化したUbuntuベースのディスト - [010 Editorに組み込むことも可能](https://www.sweetscape.com/010editor/repository/scripts/file_info.php?file=RateStrings.1sc&type=1&sort=) - ref: - [Learning to Rank Strings Output for Speedier Malware Analysis](https://www.fireeye.com/blog/threat-research/2019/05/learning-to-rank-strings-output-for-speedier-malware-analysis.html) -- **exiftool** +- **exiftool** +- **[Detect It Easy](https://github.com/horsicq/Detect-It-Easy)** + - library, linker, packer, compilerなどを判別 - **wql** - wqlで子プロセスの検索 ```