FireEye

Repositories

• HXTool

  HXTool is an extended user interface for the FireEye HX Endpoint product. HXTool can be installed on a dedicated server or on your physical workstation. HXTool provides additional features and capabilities over the standard FireEye HX web user interface. HXTool uses the fully documented REST API that comes with the FireEye HX for communication w…
  JavaScript 26 25 6 1 Updated Feb 18, 2021

• capa

  The FLARE team's open-source tool to identify capabilities in executable files.

  reverse-engineering malware-analysis
  Python Apache-2.0 167 1,424 42 5 Updated Feb 17, 2021

• gocat

  Provides access to libhashcat

  fireeye-flare
  Go MIT 10 16 0 0 Updated Feb 17, 2021

• capa-rules

  Standard collection of rules for capa: the tool for enumerating the capabilities of programs

  hacktoberfest
  Apache-2.0 39 173 45 (4 issues need help) 3 Updated Feb 17, 2021

• capa-testfiles
  Python 12 12 0 0 Updated Feb 17, 2021

• Vulnerability-Disclosures
  C++ 9 26 0 0 Updated Feb 17, 2021

• commando-vm

  Complete Mandiant Offensive VM (Commando VM), a fully customizable Windows-based pentesting virtual machine distribution. commandovm@fireeye.com

  windows penetration-testing red-teaming fireeye-flare
  PowerShell Apache-2.0 953 4,436 37 5 Updated Feb 13, 2021

• speakeasy

  Windows kernel and user mode emulation.

  emulation malware-analysis
  Python MIT 79 585 24 0 Updated Feb 11, 2021

• sunburst_countermeasures
  YARA 183 504 5 3 Updated Feb 11, 2021

• PwnAuth
  Python Apache-2.0 63 269 1 3 Updated Feb 8, 2021

• rvmi-rekall

  Rekall Forensics and Incident Response Framework with rVMI extensions
  Python GPL-2.0 15 23 0 4 Updated Feb 8, 2021

• flare-floss

  FireEye Labs Obfuscated String Solver - Automatically extract obfuscated strings from malware.

  strings malware deobfuscation fireeye-flare
  Python Apache-2.0 294 1,770 49 2 Updated Feb 5, 2021

• Mandiant-Azure-AD-Investigator
  PowerShell Apache-2.0 44 328 2 0 Updated Feb 5, 2021

• FIDL

  A sane API for IDA Pro's decompiler. Useful for malware RE and vulnerability research

  api research decompiler malware ida vulnerability reversing
  Python MIT 51 314 1 0 Updated Jan 27, 2021

• ThreatPursuit-VM

  Threat Pursuit Virtual Machine (VM): A fully customizable, open-sourced Windows-based distribution focused on threat intelligence analysis and hunting designed for intel and malware analysts as well as threat hunters to get up and running quickly.

  data-science intelligence analytics virtual-machine malware threat cyber
  PowerShell 133 787 10 1 Updated Jan 20, 2021

• flare-ida

  IDA Pro utilities from FLARE team

  reverse-engineering ida ida-pro ida-plugin idapython fireeye-flare
  Python Apache-2.0 372 1,356 15 3 Updated Jan 19, 2021

• flare-emu

  emulation malware-analysis fireeye-flare
  Python Apache-2.0 67 482 2 0 Updated Jan 14, 2021

• OfficePurge
  C# Apache-2.0 28 160 1 1 Updated Jan 10, 2021

• gocrack-ui

  The User Interface for GoCrack

  fireeye-flare
  Vue MIT 40 67 0 11 Updated Jan 5, 2021

• red_team_tool_countermeasures
  YARA 823 2,343 1 2 Updated Dec 30, 2020

• jest-environment-serverless

  Testing your Serverless projects with Jest the easy way!
  JavaScript MIT 6 20 6 8 Updated Dec 11, 2020

• jitm

  JITM is an automated tool to bypass the JIT Hooking protection on a .NET sample.

  hooks dotnet jit malware-analysis jit-compiler fireeye-flare
  C++ Apache-2.0 9 20 0 1 Updated Dec 10, 2020

• stringsifter

  A machine learning tool that ranks strings based on their relevance for malware analysis.

  machine-learning strings reverse-engineering learning-to-rank malware-analysis fireeye-flare fireeye-data-science
  Python Apache-2.0 80 460 4 0 Updated Dec 2, 2020

• flare-vm

  reverse-engineering malware-analysis fireeye-flare
  PowerShell Apache-2.0 452 2,622 88 0 Updated Nov 29, 2020

• flare-fakenet-ng

  [Suspended] FakeNet-NG - Next Generation Dynamic Network Analysis Tool

  malware-analysis traffic-redirection fireeye-flare fakenet-ng
  Python Apache-2.0 271 1,207 42 15 Updated Nov 11, 2020

• gocrack

  GoCrack is a management frontend for password cracking tools written in Go

  fireeye-flare
  Go MIT 215 976 15 (2 issues need help) 0 Updated Nov 9, 2020

• flare-floss-testfiles

  Resources for testing FLOSS by the FLARE team.
  C 4 1 0 0 Updated Nov 4, 2020

• muse-technical-challenge

  Muse Technical Challenge Stencil Component Starter
  TypeScript 5 1 0 1 Updated Oct 25, 2020

• DFUR-Splunk-App

  The "DFUR" Splunk application and data that was presented at the 2020 SANS DFIR Summit.

  log-analysis incident-response splunk-application
  MIT 6 6 0 0 Updated Sep 9, 2020

• dod-example-apps

  Example applications for FireEye's Detection on Demand service
  Python Apache-2.0 4 6 0 0 Updated Aug 25, 2020