Highlights
- Arctic Code Vault Contributor
- Developer Program Member
- Pro
Create your own GitHub profile
Sign up for your own profile on GitHub, the best place to host code, manage projects, and build software alongside 50 million developers.
Sign up
Pinned
272 contributions in the last year
Activity overview
Contribution activity
August 2020
- Ana06/miasm Python
- Ana06/capa Python
- Ana06/action-zip Dockerfile
- Ana06/idapython Python
- Ana06/plasma5-wallpapers-dynamic C++
Created a pull request in fireeye/capa that received 2 comments
Fix build workflow & zip binaries
The build workflow is currently broken due to the release of pyinstaller 4 which doesn't support Python 2.7. Fix pyinstaller to version 3 to fix it. …
+56
−30
•
2
comments
- rule: detect packers based on section names
- rule: thorough detection of injection
- add ICMP routines
- rule: detect secure desktop protection bypass
- rule: windows version via RtlGetNtVersionNumbers (need example)
- CP Malware Evasion Encyclopedia
- rule: resolve ntoskrnl base address with NTDLL (need example)
- rule: resolve exe path via MSVCRT
- rule: datamine keystrokes via input method manager (need example)
- rule: capture major, minor, build versions via ntdll (need example)
- rule: check processor architecture (need example)

