Jack McDowell

DEEPGLASS. DEEPGLASS is a sysinternals-style tool designed to identify and collect potentially malicious files across a system

pe-sieve. Scans a given process. Recognizes and dumps a variety of potentially malicious implants (replaced/injected PEs, shellcodes, hooks, in-memory patches).

libpeconv. A library to load, manipulate, dump PE files. See also: https://github.com/hasherezade/libpeconv_tpl

DynamicPersistence. JavaScript

TestHarness. A test harness that runs a series of test steps across a set of VMs.