nganhkhoa/mether049-malware
1
0
Fork 0
mirror of https://github.com/nganhkhoa/malware.git synced 2024-06-10 21:32:07 +07:00
Code Issues Projects Releases Wiki Activity

Update malware-analysis_ref_and_memo.md

Browse Source
This commit is contained in:
mether049 2020-08-26 23:27:39 +09:00 committed by GitHub
parent 250ad7302d
commit 892a3cce8f
No known key found for this signature in database
GPG Key ID: 4AEE18F83AFDEB23
1 changed files with 4 additions and 1 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

5
malware-analysis_ref_and_memo.md
View File

@ -381,7 +381,10 @@ Injecition/Hollowingされたプロセスの自動検出<br>
- etc. - etc.
- **[formbook_decode_pcap.py](https://github.com/ThisIsSecurity/malware/tree/master/formbook)** - **[formbook_decode_pcap.py](https://github.com/ThisIsSecurity/malware/tree/master/formbook)**
- formbookの通信のデコードプログラム - formbookの通信のデコードプログラム
# Email Analysis
- **[EML analyzer](https://github.com/ninoseki/eml_analyzer)**
- ヘッダ,ボディ，添付ファイルのanalysis
- IoCの抽出
# PDF Analysis # PDF Analysis
- **[pdfid.py](https://blog.didierstevens.com/programs/pdf-tools/)** - **[pdfid.py](https://blog.didierstevens.com/programs/pdf-tools/)**