Volatility, YARA, pefile, Capstone, Unicorn, angr and Ghidra Scripting
Forensics and reverse-engineering: memory analysis, pattern rules, PE parsing, disassembly, CPU emulation, symbolic execution, and Ghidra automation.
Expert
Run unknown samples only inside isolated virtual machines.
Spotted a mistake or want to add detail? Suggest an improvement — Content Contributors' edits are reviewed by editors before they go live.
Discussion (0)
Sign in or join free to ask questions and discuss this topic.