diff --git a/README.md b/README.md index 6eb28a0..f6c3140 100644 --- a/README.md +++ b/README.md @@ -584,6 +584,10 @@ This repository is created as an online bookmark for useful links, resources and flare-emu flare-emu marries a supported binary analysis framework, such as IDA Pro or Radare2, with Unicorns emulation framework to provide the user with an easy to use and flexible interface for scripting emulation tasks. + + fibratus + A modern tool for the Windows kernel exploration and observability + fireeye/capa capa detects capabilities in executable files. You run it against a PE file or shellcode and it tells you what it thinks the program can do. For example, it might suggest that the file is a backdoor, is capable of installing services, or relies on HTTP to communicate.