malscan
Malscan is a tool to scan process memory for YARA matches and execute Python scripts.
malscan
Malscan is a tool to scan process memory for YARA matches and execute Python scripts.
malscan Description
Malscan is a tool to scan process memory for YARA matches and execute Python scripts if a match is found. This is useful for extracting configurations from malware process memory. The tool allows users to define YARA rules to detect specific configurations in memory and run custom Python scripts upon detection.
malscan FAQ
Common questions about malscan including features, pricing, alternatives, and user reviews.
malscan is Malscan is a tool to scan process memory for YARA matches and execute Python scripts.. It is a Security Operations solution designed to help security teams with YARA, Memory Forensics.
ALTERNATIVES
Scan files or process memory for Cobalt Strike beacons and parse their configuration.
An OCaml Ctypes wrapper for the YARA matching engine that enables malware identification capabilities in OCaml applications.
A collection of YARA rules specifically designed for forensic investigations and malware analysis, providing pattern matching capabilities for files and memory dumps.
VolatilityBot automates memory dump analysis by extracting executables, detecting code injections, and performing automated malware scanning using YARA and ClamAV.
A toolkit for forensic analysis of network appliances with YARA decoding options and frame extraction capabilities.
POPULAR
TRENDING CATEGORIES
Stay Updated with Mandos Brief
Get strategic cybersecurity insights in your inbox