fireeye

Threat Pursuit Virtual Machine (VM): A fully customizable, open-sourced Windows-based distribution focused on threat intelligence analysis and hunting designed for intel and malware analysts as well as threat hunters to get up and running quickly.

FireEye Alert json files to MISP Malware information sharing plattform (Alpha)

Python API bindings for FireEye Products

EmailScanner is an integration application in python that uses `exchangelib` to process mail items in Microsoft exchange.

Extracts the Timeline of a Redline parsed sqlite database so it can be used e.g. in an ELK stack.

To stop the all seeing eye of Sauron and make your MacBook operate as it should be.

Tracking the Solarwinds Hack.

PowerShell implementation of FireEyeHX API v3

SpyCore - Windows Malicious FIle Scanner (Distributes)

Assemblyline 4 Obfuscated string solver

Publicly available threat intelligence reports

Parses the Redline CSV output in a csv that is importable by timesketch