Rurik Noriben issues - Githubissues

Rurik / Noriben

Noriben - Portable, Simple, Malware Analysis Sandbox

Other

1.1k stars 223 forks source link

issues

Newest

Newest Most commented Recently updated Oldest Least commented Least recently updated

noriben does not create the text file

#63 lupinlicious closed 2 days ago
4
v2.0.1 update

#62 Rurik opened 9 months ago
0
CLosing Noriben

#61 oasec1 closed 10 months ago
2
this issue is back. See below

#60 oasec1 opened 11 months ago
4
hashlist and csv creation issues

#58 phate1 closed 2 days ago
2
Exiting with error code: 8: Error creating PML

#57 oasec1 opened 1 year ago
3
New issue - VM running Windows 11 Pro

#56 oasec1 closed 1 year ago
5
Added attribution for hanging bug to Roman Hussy

#55 Rurik closed 1 year ago
0
Ninja edit to 1.8.8 to add execution timeout for termination to stop …

#54 Rurik closed 1 year ago
0
1.8.8 - replaced calls to wait() with communicate()

#53 Rurik closed 1 year ago
0
restore file that was accidentally removed, because I can't git

#52 Rurik closed 2 years ago
0
V1.8.7 release

#51 Rurik closed 2 years ago
0
Analysis

#50 jzuercher28 closed 2 years ago
1
Update Noriben.py

#49 unk0unk0unk0 closed 3 years ago
1
Logo addition, README.MD changes

#48 Rurik closed 3 years ago
0
1.8.6 release to fix binary registry key crash

#47 Rurik closed 3 years ago
0
1.8.5 Update

#46 Rurik closed 3 years ago
0
I've been playing with this issue for awhile, and apologies for the lengthy delay. It's an issue of the backing file being encrypted, but Procmon does have the ability to use virtual memory for the live data. Do you have a sample that you can test against, or provide hash for so I can test?

#45 oasec1 opened 3 years ago
10
ValueError: could not convert string to float: '3\xa0256'

#44 lupinlicious closed 3 years ago
14
PML file being encrypted by malware

#42 oasec1 opened 3 years ago
2
procmon.exe path problem

#41 xrkk closed 1 year ago
3
Removed pledgie link, service is no longer functional

#40 Rurik closed 4 years ago
0
Fix to move files, add debugging output to Noriben, to troubleshoot #29

#39 Rurik closed 4 years ago
0
Pledgie Link

#38 stryker2k2 closed 4 years ago
1
Empty text and timeline file generated by Noriben

#37 VikramKharvi opened 4 years ago
16
Noriben can't load the CSVfile made by procmon

#36 Noribentou opened 4 years ago
13
Update Noriben.py

#35 moval0x1 closed 4 years ago
1
Chinese characters in log

#34 oasec1 closed 4 years ago
2
Malware - encrypting the.pml

#33 oasec1 closed 3 years ago
2
I've kept the ProcmonConfiguration.PMC name because that's what SysInternals has always referred to it as. I don't want people to think that this is using an entirely new file format when they may already have PMC's lying around.

#32 oasec1 closed 4 years ago
3
How to whitelist System:4 process?

#31 juliaebner closed 4 years ago
4
question regarding procmon.pmc configuration file name and extenstion

#30 oasec1 closed 2 days ago
2
Registry lenght exceeded

#29 Feldunost closed 3 years ago
14
Non-PE File (e.g. Malicious Office Files) Support on Sandbox

#28 malwarehuntingisfun closed 4 years ago
3
Procmon needs permisison to "make changes on this computer"

#27 malwarehuntingisfun closed 4 years ago
1
Shutting down VM after analysis

#26 malwarehuntingisfun closed 5 years ago
2
[!] Error trying to copy file from guest. Continuing. Error 0xff: Unexpected Error

#25 malwarehuntingisfun closed 5 years ago
11
NoribenSandbox.py crashes if magic contains unicode

#24 Rurik closed 1 year ago
1
More docs

#23 cmcramer closed 5 years ago
0
Errors with Whitelist Hashes & Virus Total

#22 SeattleForensics closed 5 years ago
1
Noriben will crash with "--pml" option

#21 mnrkbys closed 6 years ago
3
Procmon not found in Temp

#20 Rurik closed 1 year ago
1
Error: A file was not found

#19 guilhermebasalia closed 6 years ago
1
output_dir not being honored

#18 Rurik closed 6 years ago
2
Problem with VMX path

#17 najashark closed 6 years ago
5
virtualbox integration

#16 d4n13l4 closed 6 years ago
1
Not whitelisting changed Procmon binary

#15 Rurik closed 6 years ago
2
Python "requests" module mussing, ProcMon cannot open pml file for reading and CSV file cannot be created.

#14 mikenav777 closed 6 years ago
5
Remove base directory from File Activity

#13 Rurik opened 7 years ago
2
request for clarification of documentation in the readme file

#12 sonofagl1tch closed 7 years ago
4