Nex

kraken. Cross-platform Yara scanner written in Go

targetedthreats. Collection of IOCs related to targeting of civil society

pcqf. pcqf (PC Quick Forensics) helps quickly gathering forensic evidence from Windows, Mac, and Linux systems, in order to identify potential traces of compromise.

ntap. Transparent network tap

vxcage. REST API based malware repository (abandoned)

virustotal. VirusTotal tools

snoopdroid. (Abandoned) Extract packages from an Android device

habu. Python static blog generator

resist-the-internet. Leave no chance to Surveillance Capitalism and let this extension make decisions for you

volatility. An advanced memory forensics framework

stix2gen. Python

is-lockdown. JavaScript

kraken-docs.

tldts. Library to work against complex domain names, subdomains and URIs.

iOSbackup. A Pyhotn 3 class that reads and extracts files from a password-encrypted iOS backup created by iTunes on Mac and Windows. Compatible with iOS 13.

threatactors. Parsable collaborative collection of threat actors

mass_archive. A basic tool for pushing a web page to multiple archiving services at once.

processing_websockets. A web socket library, including both server and client, for Processing

urlx. Golang pkg for URL parsing and normalization

snoopwatchd. Go

oz. OZ: a sandboxing system targeting everyday workstation applications

IRTF-HRPC. Files of IRTF HRPC research group

html2text. Golang HTML to plaintext conversion library

semiphemeral. Automatically delete your old tweets, except for the ones you want to keep

libimobiledevice. A cross-platform protocol library to communicate with iOS devices

misp-galaxy. Clusters and elements to attach to MISP events or attributes (like threat actors)

pymobiledevice3. pymobiledevice fork with more recent coding standards and many more features

jarm. Python

iranthreats.github.io. HTML

gopsutil. psutil for golang

go-yara. Go bindings for YARA

go-taskscheduler. Connect to Windows Task Scheduler 2.0 with Golang

go-removal. Go