Malware Analysis Python Packages

oletools

oletools - python tools to analyze MS OLE2 files (Structured Storage, Compound File Binary Format) and MS Office documents, for malware analysis, forensics and debugging.

6.1M 3K 604

lief

LIEF - Library to Instrument Executable Formats (C++, Python, Rust)

1.8M 5K 736

python-flirt

intel x86(-64) code analysis library that reconstructs control flow

89K 109 14

assemblyline-ui

Web interface and APIs for Assemblyline 4

71K 21 29

assemblyline

Base components for Assemblyline 4 (Datastore, ODM, Filestore, Remote Datatypes, utils function, etc...)

70K 72 42

assemblyline-core

Core server components for Assemblyline 4 (Alerter, dispatcher, expiry, ingester, scaler, updater, ...)

67K 21 19

assemblyline-v4-service

Base service class from Assemblyline 4

67K 16 13

flare-capa

The FLARE team's open-source tool to identify capabilities in executable files.

61K 6K 706

assemblyline-service-server

Service tasking and result publishing API for Assemblyline 4

58K 7 5

assemblyline-service-client

Service client that interfaces with the API to fetch tasks and publish the result for a service in Assemblyline 4

56K 3 8

quark-engine

An Obfuscation-Neglect Android Malware Scoring System

54K 2K 214

pyonenote

A python library to parse OneNote (.one) files

48K 153 24

ioc-finder

Simple, effective, and modular package for parsing observables (indicators of compromise (IOCs), network data, and other, security related information) from text. It uses grammars rather than regexes which makes it more readable, maintainable, and hackable. Explore our interactive documentation here: https://hightower.space/ioc-finder/

47K 183 45