RME-DisCo Research Group
Change the repository type filter
All
Repositories list
48 repositories
sdhash
Public- Measurement pipeline for the runtime, memory, binary-size, and protection-coverage cost of compiler security hardening (GCC, Clang, Rustc). Docker-based, CSV ou…
APOTHEOSIS
PublicA specialized implementation of the Hierarchical Navigable Small World (HNSW) data structure adapted for efficient nearest neighbor lookup of approximate matchi…rop3
PublicA tool to search for gadgets, operations, and ROP chains using a backtracking algorithm in a tree-like structuresigcheck
PublicVolatility3 plugin to validate Authenticode-signed processes, either with embedded signature or catalog-signedautomated-ioc-extractor
Publicmemslicer
Publicradare2
Publicradare2-extras
PublicMANTILLA
PublicCAPEv2
Publicmemslice-spec
PublicSkyfall-CTI
Publicsum-plugin
PublicVolatility3 plugin to undo modifications done by relocation process on modules- Volatility3 plugin to yield and compare similarity digest of modules on execution.
markedPefile
Publicprocessfuzzyhash
PublicVolatility3 plugin to calculate and compare Windows processes fuzzy hashesresidentmem
PublicVolatility3 plugin to obtain the number of the resident memory pages per module (exe or dll) and per driver from a Windows memory dump.malscan
PublicVolatility3 plugin to detect malicious code thanks to ClamAV (kind of combination of malfind + ClamAV)openssl
Publicwinesap
PublicVolatility plugin to search for all Autostart Extensibility Points (AESPs)BinTopsy
PublicMARISSA
Publicsynoptic
PublicSynoptic: Concolic execution for network protocol inferenceheaplist
PublicVolatility 3 plugin to extract the heap from Windows memory imagesMalGraphIQ
PublicTransform your malware sandbox reports and execution traces into behavior and category graphs and plot their Windows Behavior Catalog (WBC) behavior identificat…KeyReaper
Publicrme-Python-toolkit
Public
ProTip! When viewing an organization's repositories, you can use the
props. filter to filter by custom property.