Pinned

1. mandiant/flare-floss Public

   FLARE Obfuscated String Solver - Automatically extract obfuscated strings from malware.

   Python 2.6k 417

2. mandiant/capa Public

   The FLARE team's open-source tool to identify capabilities in executable files.

   Python 2.8k 385

3. python-registry Public

   Pure Python parser for Windows Registry hives.

   Python 391 104

4. python-evtx Public

   Pure Python parser for recent Windows Event Log files (.evtx)

   Python 592 157

5. INDXParse Public

   Tool suite for inspecting NTFS artifacts.

   Python 177 43

6. vivisect/vivisect Public

   Python 821 184