From a78f1b162efbcfd2a5b502dcee5688e1603ea514 Mon Sep 17 00:00:00 2001 From: pe3zx Date: Wed, 13 Jun 2018 14:55:57 +0000 Subject: [PATCH] Tools: Malware Analysis: P4T12ICK/ypsilon --- README.md | 4 ++++ 1 file changed, 4 insertions(+) diff --git a/README.md b/README.md index 8db808e..1f5b7d7 100644 --- a/README.md +++ b/README.md @@ -1414,6 +1414,10 @@ _return-to-libc techniques_ OALabs/PyIATRebuild Automatically rebuild Import Address Table for dumped PE file. With python bindings! + + P4T12ICK/ypsilon + Ypsilon is an Automated Security Use Case Testing Environment using real malware to test SIEM use cases in an closed environment. Different tools such as Ansible, Cuckoo, VirtualBox, Splunk and ELK are combined to determine the quality of a SIEM use case by testing any number of malware against a SIEM use case. Finally, a test report is generated giving insight to the quality of an use case. + phage-nz/ph0neutria ph0neutria is a malware zoo builder that sources samples straight from the wild. Everything is stored in Viper for ease of access and manageability.