From ef7bcf55417d146cf35f49c93e4f8f57bef08f21 Mon Sep 17 00:00:00 2001 From: pe3zx Date: Mon, 5 Oct 2020 15:59:30 +0700 Subject: [PATCH] Add nccgroup/WindowsMemPageDelta to Binary Analysis --- README.md | 4 ++++ 1 file changed, 4 insertions(+) diff --git a/README.md b/README.md index 2ed422f..7a812ff 100644 --- a/README.md +++ b/README.md @@ -399,6 +399,10 @@ This repository is created as an online bookmark for useful links, resources and NASA-SW-VnV/ikos IKOS (Inference Kernel for Open Static Analyzers) is a static analyzer for C/C++ based on the theory of Abstract Interpretation + + nccgroup/WindowsMemPageDelta + A Microsoft Windows service to provide telemetry on Windows executable memory page changes to facilitate threat detection + pierrezurek/Signsrch tool for searching signatures inside files, extremely useful in reversing engineering for figuring or having an initial idea of what encryption/compression algorithm is used for a proprietary protocol or file. it can recognize tons of compression, multimedia and encryption algorithms and many other things like known strings and anti-debugging code which can be also manually added since it's all based on a text signature file read at runtime and easy to modify.