Skip to content

@airbus-cert Airbus CERT

Change the repository type filter

All

    Repositories list

    43 repositories

    • regrippy

      Public
      A modern Python-3-based alternative to RegRipper
      pythonwindowsregistryforensicsdfir
      Python
      •
      Apache License 2.0
      •17•187•2•0•Updated Nov 4, 2024Nov 4, 2024

    • usnrs

      Public
      USN Journal parsing software and library
      Rust
      •
      Apache License 2.0
      •0•5•2•0•Updated Oct 14, 2024Oct 14, 2024

    • minusone

      Public
      Powershell Linter
      Rust
      •
      MIT License
      •1•46•0•0•Updated Sep 23, 2024Sep 23, 2024

    • tree-sitter-powershell

      Public
      Powershell grammar for tree-sitter
      JavaScript
      •
      MIT License
      •7•38•3•1•Updated Sep 23, 2024Sep 23, 2024

    • Yagi

      Public
      Yet Another Ghidra Integration for IDA
      ida-plugindecompilerreverse-engineeringdisassemblerghidra
      C++
      •
      Apache License 2.0
      •39•486•9•1•Updated Aug 20, 2024Aug 20, 2024

    • vbSparkle

      Public
      VBScript & VBA source-to-source deobfuscator with partial-evaluation
      C#
      •
      Apache License 2.0
      •10•73•1•0•Updated Aug 7, 2024Aug 7, 2024

    • skyblue.team

      Public
      Our website
      HTML
      •0•1•0•0•Updated Aug 6, 2024Aug 6, 2024

    • nix-forensics

      Public
      Reproducible forensics environment, 100% of the time
      nixforensics
      Nix
      •3•5•0•0•Updated Aug 5, 2024Aug 5, 2024

    • timeliner

      Public
      A rewrite of mactime, a bodyfile reader
      forensicsdfirmactimebodyfile
      Go
      •
      Apache License 2.0
      •6•36•0•0•Updated Aug 5, 2024Aug 5, 2024

    • bodyfile

      Public
      A bodyfile parsing library
      golangforensicsdfirmactimebodyfile
      Go
      •
      Apache License 2.0
      •2•3•0•0•Updated Aug 5, 2024Aug 5, 2024

    • ttddbg

      Public
      Time Travel Debugging IDA plugin
      debuggingreverse-engineeringida
      C++
      •
      Apache License 2.0
      •35•553•5•1•Updated Jun 27, 2024Jun 27, 2024

    • tree-sitter-traversal

      Public
      Traversal of tree-sitter Trees and any arbitrary tree with a TreeCursor-like interface
      Rust
      •
      MIT License
      •6•0•0•0•Updated Jun 10, 2024Jun 10, 2024

    • CVE-2024-4040

      Public
      Scanner for CVE-2024-4040
      Python
      •8•48•0•0•Updated May 17, 2024May 17, 2024

    • tree-sitter

      Public
      An incremental parsing system for programming tools
      Rust
      •
      MIT License
      •1.4k•2•0•0•Updated Oct 5, 2023Oct 5, 2023

    • ttd2mdmp

      Public
      Extract data of TTD trace file to a minidump
      C++
      •
      Apache License 2.0
      •1•28•2•0•Updated Jul 31, 2023Jul 31, 2023

    • comida

      Public
      An IDA Plugin that help analyzing module that use COM
      Python
      •
      Apache License 2.0
      •24•198•2•0•Updated Jul 27, 2023Jul 27, 2023

    • yara-ttd

      Public
      Use YARA rules on Time Travel Debugging traces
      C
      •
      Apache License 2.0
      •13•85•3•1•Updated Jul 11, 2023Jul 11, 2023

    • dnYara

      Public
      A multi-platform .Net wrapper library for the native Yara library.
      C#
      •
      Apache License 2.0
      •11•38•5•1•Updated Jun 30, 2023Jun 30, 2023

    • SysmonForLinux

      Public
      C
      •
      MIT License
      •184•0•0•0•Updated Jun 27, 2023Jun 27, 2023

    • SysmonCommon

      Public
      The common parts of the Sysinternals Sysmon tool shared between the Windows and Linux versions.
      C++
      •
      MIT License
      •18•0•0•0•Updated Jun 27, 2023Jun 27, 2023

    • ttd-bindings

      Public
      Bindings for Microsoft WinDBG TTD
      C++
      •31•1•0•0•Updated Mar 29, 2023Mar 29, 2023

    • MISP

      Public
      MISP (core software) - Open Source Threat Intelligence Platform (formely known as Malware Information Sharing Platform)
      PHP
      •
      GNU Affero General Public License v3.0
      •1.4k•4•0•0•Updated Oct 14, 2022Oct 14, 2022

    • etwbreaker

      Public
      An IDA plugin to deal with Event Tracing for Windows (ETW)
      idaetw
      Python
      •
      Apache License 2.0
      •16•50•0•0•Updated Jul 8, 2022Jul 8, 2022

    • dirtypipe-ebpf_detection

      Public
      An eBPF detection program for CVE-2022-0847
      C
      •
      Apache License 2.0
      •3•27•0•0•Updated Jul 5, 2022Jul 5, 2022

    • awesome-ida-x64-olly-plugin

      Public
      A curated list of IDA x64DBG, Ghidra and OllyDBG plugins.
      151•1•0•0•Updated Jun 10, 2022Jun 10, 2022

    • dnMisp

      Public
      dnMisp is a simple, MISP Rest API consumer .Net Standard 2.0 library.
      C#
      •
      Apache License 2.0
      •0•0•0•0•Updated May 25, 2022May 25, 2022

    • ntTraceControl

      Public
      Powershell Event Tracing Toolbox
      securitypowershellthreat-hunting
      PowerShell
      •
      Apache License 2.0
      •9•72•0•0•Updated Mar 21, 2022Mar 21, 2022

    • Winshark

      Public
      A wireshark plugin to instrument ETW
      pcapwiresharketw
      Lua
      •
      Apache License 2.0
      •59•534•4•0•Updated Jan 28, 2022Jan 28, 2022

    • libpcap

      Public
      the LIBpcap interface to various kernel packet capture mechanism
      C
      •
      Other
      •851•0•0•0•Updated Jan 27, 2022Jan 27, 2022

    • ghidra

      Public
      Ghidra is a software reverse engineering (SRE) framework
      Java
      •
      Apache License 2.0
      •5.9k•1•0•0•Updated Dec 20, 2021Dec 20, 2021