Scripts to run within Ghidra, maintained by the Trellix ARC team

Repository of YARA rules made by Trellix ATR Team

BSim signatures and databases for Ghidra to recover function symbols with

A repository with a variety of compiled Golang binaries, each of which contains the entire Golang runtime for the given architecture for the specific Golang version

FunctionID databases for Ghidra to recover function symbols with from stripped binaries

An automatic unpacker and logger for DotNet Framework targeting files

A graphical user interface to easily read through, and filter, DotDumper JSON-based logs

The native (unmanaged) library which contains hooks for native functions that are hooked using DotDumper

A project created with an aim to emulate and test exfiltration of data over different network protocols.

Creosote is our solution to searching for the tarfile vulnerability described by CVE-2007-4559.