From e91ee2896fd26f031d2bb4695cd68e46c717b2c3 Mon Sep 17 00:00:00 2001 From: pe3zx Date: Wed, 25 Aug 2021 14:44:45 +0700 Subject: [PATCH] Add: fibratus to Binary Analysis section --- README.md | 4 ++++ 1 file changed, 4 insertions(+) diff --git a/README.md b/README.md index 6eb28a0..f6c3140 100644 --- a/README.md +++ b/README.md @@ -584,6 +584,10 @@ This repository is created as an online bookmark for useful links, resources and flare-emu flare-emu marries a supported binary analysis framework, such as IDA Pro or Radare2, with Unicorns emulation framework to provide the user with an easy to use and flexible interface for scripting emulation tasks. + + fibratus + A modern tool for the Windows kernel exploration and observability + fireeye/capa capa detects capabilities in executable files. You run it against a PE file or shellcode and it tells you what it thinks the program can do. For example, it might suggest that the file is a backdoor, is capable of installing services, or relies on HTTP to communicate.