Pinned

1. mandiant/flare-floss mandiant/flare-floss Public

   FLARE Obfuscated String Solver - Automatically extract obfuscated strings from malware.

   Python 3k 442

2. mandiant/capa mandiant/capa Public

   The FLARE team's open-source tool to identify capabilities in executable files.

   Python 3.9k 491

3. python-registry python-registry Public

   Pure Python parser for Windows Registry hives.

   Python 418 103

4. python-evtx python-evtx Public

   Pure Python parser for Windows Event Log files (.evtx)

   Python 676 164

5. INDXParse INDXParse Public

   Tool suite for inspecting NTFS artifacts.

   Python 205 42

6. vivisect/vivisect vivisect/vivisect Public

   Python 896 184