Tools/Resources

Toolkit Directory

This section collects practical resources for malware analysis, investigation, detection, and reconnaissance.

Check out the pages below for curated tools and references.

Analysis

Sandboxes

Detonation environments, browser isolation, and open-source sandbox workflows for safe sample triage.

Open sandbox resourcesDeception

Honeypots

Service emulation and trap infrastructure for studying attacker activity and gathering telemetry.

Open honeypot resourcesVisibility

Detection and Monitoring

NIDS, host visibility, and supporting open-source monitoring options for seeing suspicious behavior faster.

Open detection resourcesInvestigation

OSINT

Enrichment, reputation, and reconnaissance tools for chasing down suspicious infrastructure and indicators.

Open OSINT resources