nganhkhoa/mether049-malware
1
0
Fork 0
mirror of https://github.com/nganhkhoa/malware.git synced 2024-06-10 21:32:07 +07:00
Code Issues Projects Releases Wiki Activity

Update malware-analysis_ref_and_memo.md

Browse Source
This commit is contained in:
mether049 2020-09-30 19:27:52 +09:00 committed by GitHub
parent 017fb52cff
commit a869f25b5e
No known key found for this signature in database
GPG Key ID: 4AEE18F83AFDEB23
1 changed files with 3 additions and 0 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

3
malware-analysis_ref_and_memo.md
View File

@ -398,6 +398,9 @@ Injecition/Hollowingされたプロセスの自動検出<br>
- etc.
- **[formbook_decode_pcap.py](https://github.com/ThisIsSecurity/malware/tree/master/formbook)**
- formbookの通信のデコードプログラム
- **[CobaltStrikeScan](https://github.com/Apr4h/CobaltStrikeScan)**
- CobaltStrike Beaconのメモリスキャンとconfig
# Email Analysis
- **[EML analyzer](https://github.com/ninoseki/eml_analyzer)**
- ヘッダ,ボディ，添付ファイルのanalysis