Skip to content

@airbus-cert Airbus CERT

Change the repository type filter

All

    Repositories list

    46 repositories

    • minusone

      Public
      Powershell Linter
      Rust
      •
      MIT License
      •1•62•5•1•Updated Jul 1, 2025Jul 1, 2025

    • tree-sitter-powershell

      Public
      Powershell grammar for tree-sitter
      JavaScript
      •
      MIT License
      •14•46•4•4•Updated Jul 1, 2025Jul 1, 2025

    • indx-rs

      Public
      $I30 INDX Carver
      Rust
      •1•15•0•0•Updated Jun 23, 2025Jun 23, 2025

    • cve-2025-24985

      Public
      Detection of malicious VHD files for CVE-2025-24985
      Python
      •1•2•0•0•Updated Apr 2, 2025Apr 2, 2025

    • regrippy

      Public
      A modern Python-3-based alternative to RegRipper
      pythonwindowsregistryforensicsdfir
      Python
      •
      Apache License 2.0
      •19•197•2•0•Updated Mar 31, 2025Mar 31, 2025

    • tree-sitter-traversal

      Public
      Traversal of tree-sitter Trees and any arbitrary tree with a TreeCursor-like interface
      Rust
      •
      MIT License
      •7•1•0•0•Updated Mar 13, 2025Mar 13, 2025

    • usnrs

      Public
      USN Journal parsing software and library
      Rust
      •
      Apache License 2.0
      •0•8•2•0•Updated Mar 11, 2025Mar 11, 2025

    • scrings

      Public
      Semantic strings based on tree-sitter
      Rust
      •
      MIT License
      •2•16•2•0•Updated Feb 19, 2025Feb 19, 2025

    • Yagi

      Public
      Yet Another Ghidra Integration for IDA
      ida-plugindecompilerreverse-engineeringdisassemblerghidra
      C++
      •
      Apache License 2.0
      •41•504•9•1•Updated Aug 20, 2024Aug 20, 2024

    • vbSparkle

      Public
      VBScript & VBA source-to-source deobfuscator with partial-evaluation
      C#
      •
      Apache License 2.0
      •13•79•1•1•Updated Aug 7, 2024Aug 7, 2024

    • skyblue.team

      Public
      Our website
      HTML
      •0•1•0•0•Updated Aug 6, 2024Aug 6, 2024

    • nix-forensics

      Public
      Reproducible forensics environment, 100% of the time
      nixforensics
      Nix
      •3•8•0•0•Updated Aug 5, 2024Aug 5, 2024

    • timeliner

      Public
      A rewrite of mactime, a bodyfile reader
      forensicsdfirmactimebodyfile
      Go
      •
      Apache License 2.0
      •6•40•1•0•Updated Aug 5, 2024Aug 5, 2024

    • bodyfile

      Public
      A bodyfile parsing library
      golangforensicsdfirmactimebodyfile
      Go
      •
      Apache License 2.0
      •2•3•0•0•Updated Aug 5, 2024Aug 5, 2024

    • ttddbg

      Public
      Time Travel Debugging IDA plugin
      debuggingreverse-engineeringida
      C++
      •
      Apache License 2.0
      •37•589•5•1•Updated Jun 27, 2024Jun 27, 2024

    • CVE-2024-4040

      Public
      Scanner for CVE-2024-4040
      Python
      •9•47•0•0•Updated May 17, 2024May 17, 2024

    • tree-sitter

      Public
      An incremental parsing system for programming tools
      Rust
      •
      MIT License
      •1.9k•2•0•0•Updated Oct 5, 2023Oct 5, 2023

    • ttd2mdmp

      Public
      Extract data of TTD trace file to a minidump
      C++
      •
      Apache License 2.0
      •1•28•2•0•Updated Jul 31, 2023Jul 31, 2023

    • comida

      Public
      An IDA Plugin that help analyzing module that use COM
      Python
      •
      Apache License 2.0
      •26•215•2•0•Updated Jul 27, 2023Jul 27, 2023

    • yara-ttd

      Public
      Use YARA rules on Time Travel Debugging traces
      C
      •
      Apache License 2.0
      •13•91•3•1•Updated Jul 11, 2023Jul 11, 2023

    • dnYara

      Public
      A multi-platform .Net wrapper library for the native Yara library.
      C#
      •
      Apache License 2.0
      •11•38•5•1•Updated Jun 30, 2023Jun 30, 2023

    • SysmonForLinux

      Public
      C
      •
      MIT License
      •200•0•0•0•Updated Jun 27, 2023Jun 27, 2023

    • SysmonCommon

      Public
      The common parts of the Sysinternals Sysmon tool shared between the Windows and Linux versions.
      C++
      •
      MIT License
      •19•0•0•0•Updated Jun 27, 2023Jun 27, 2023

    • ttd-bindings

      Public
      Bindings for Microsoft WinDBG TTD
      C++
      •31•1•0•0•Updated Mar 29, 2023Mar 29, 2023

    • MISP

      Public
      MISP (core software) - Open Source Threat Intelligence Platform (formely known as Malware Information Sharing Platform)
      PHP
      •
      GNU Affero General Public License v3.0
      •1.5k•4•0•0•Updated Oct 14, 2022Oct 14, 2022

    • etwbreaker

      Public
      An IDA plugin to deal with Event Tracing for Windows (ETW)
      idaetw
      Python
      •
      Apache License 2.0
      •15•55•0•0•Updated Jul 8, 2022Jul 8, 2022

    • dirtypipe-ebpf_detection

      Public
      An eBPF detection program for CVE-2022-0847
      C
      •
      Apache License 2.0
      •3•28•0•0•Updated Jul 5, 2022Jul 5, 2022

    • awesome-ida-x64-olly-plugin

      Public
      A curated list of IDA x64DBG, Ghidra and OllyDBG plugins.
      154•1•0•0•Updated Jun 10, 2022Jun 10, 2022

    • dnMisp

      Public
      dnMisp is a simple, MISP Rest API consumer .Net Standard 2.0 library.
      C#
      •
      Apache License 2.0
      •0•0•0•0•Updated May 25, 2022May 25, 2022

    • ntTraceControl

      Public
      Powershell Event Tracing Toolbox
      securitypowershellthreat-hunting
      PowerShell
      •
      Apache License 2.0
      •9•75•0•0•Updated Mar 21, 2022Mar 21, 2022