issues
search
Rurik
/
Noriben
Noriben - Portable, Simple, Malware Analysis Sandbox
Other
1.1k
stars
223
forks
source link
issues
Newest
Newest
Most commented
Recently updated
Oldest
Least commented
Least recently updated
noriben does not create the text file
#63
lupinlicious
closed
2 days ago
4
v2.0.1 update
#62
Rurik
opened
9 months ago
0
CLosing Noriben
#61
oasec1
closed
10 months ago
2
this issue is back. See below
#60
oasec1
opened
11 months ago
4
hashlist and csv creation issues
#58
phate1
closed
2 days ago
2
Exiting with error code: 8: Error creating PML
#57
oasec1
opened
1 year ago
3
New issue - VM running Windows 11 Pro
#56
oasec1
closed
1 year ago
5
Added attribution for hanging bug to Roman Hussy
#55
Rurik
closed
1 year ago
0
Ninja edit to 1.8.8 to add execution timeout for termination to stop …
#54
Rurik
closed
1 year ago
0
1.8.8 - replaced calls to wait() with communicate()
#53
Rurik
closed
1 year ago
0
restore file that was accidentally removed, because I can't git
#52
Rurik
closed
2 years ago
0
V1.8.7 release
#51
Rurik
closed
2 years ago
0
Analysis
#50
jzuercher28
closed
2 years ago
1
Update Noriben.py
#49
unk0unk0unk0
closed
3 years ago
1
Logo addition, README.MD changes
#48
Rurik
closed
3 years ago
0
1.8.6 release to fix binary registry key crash
#47
Rurik
closed
3 years ago
0
1.8.5 Update
#46
Rurik
closed
3 years ago
0
I've been playing with this issue for awhile, and apologies for the lengthy delay. It's an issue of the backing file being encrypted, but Procmon does have the ability to use virtual memory for the live data. Do you have a sample that you can test against, or provide hash for so I can test?
#45
oasec1
opened
3 years ago
10
ValueError: could not convert string to float: '3\xa0256'
#44
lupinlicious
closed
3 years ago
14
PML file being encrypted by malware
#42
oasec1
opened
3 years ago
2
procmon.exe path problem
#41
xrkk
closed
1 year ago
3
Removed pledgie link, service is no longer functional
#40
Rurik
closed
4 years ago
0
Fix to move files, add debugging output to Noriben, to troubleshoot #29
#39
Rurik
closed
4 years ago
0
Pledgie Link
#38
stryker2k2
closed
4 years ago
1
Empty text and timeline file generated by Noriben
#37
VikramKharvi
opened
4 years ago
16
Noriben can't load the CSVfile made by procmon
#36
Noribentou
opened
4 years ago
13
Update Noriben.py
#35
moval0x1
closed
4 years ago
1
Chinese characters in log
#34
oasec1
closed
4 years ago
2
Malware - encrypting the.pml
#33
oasec1
closed
3 years ago
2
I've kept the ProcmonConfiguration.PMC name because that's what SysInternals has always referred to it as. I don't want people to think that this is using an entirely new file format when they may already have PMC's lying around.
#32
oasec1
closed
4 years ago
3
How to whitelist System:4 process?
#31
juliaebner
closed
4 years ago
4
question regarding procmon.pmc configuration file name and extenstion
#30
oasec1
closed
2 days ago
2
Registry lenght exceeded
#29
Feldunost
closed
3 years ago
14
Non-PE File (e.g. Malicious Office Files) Support on Sandbox
#28
malwarehuntingisfun
closed
4 years ago
3
Procmon needs permisison to "make changes on this computer"
#27
malwarehuntingisfun
closed
4 years ago
1
Shutting down VM after analysis
#26
malwarehuntingisfun
closed
5 years ago
2
[!] Error trying to copy file from guest. Continuing. Error 0xff: Unexpected Error
#25
malwarehuntingisfun
closed
5 years ago
11
NoribenSandbox.py crashes if magic contains unicode
#24
Rurik
closed
1 year ago
1
More docs
#23
cmcramer
closed
5 years ago
0
Errors with Whitelist Hashes & Virus Total
#22
SeattleForensics
closed
5 years ago
1
Noriben will crash with "--pml" option
#21
mnrkbys
closed
6 years ago
3
Procmon not found in Temp
#20
Rurik
closed
1 year ago
1
Error: A file was not found
#19
guilhermebasalia
closed
6 years ago
1
output_dir not being honored
#18
Rurik
closed
6 years ago
2
Problem with VMX path
#17
najashark
closed
6 years ago
5
virtualbox integration
#16
d4n13l4
closed
6 years ago
1
Not whitelisting changed Procmon binary
#15
Rurik
closed
6 years ago
2
Python "requests" module mussing, ProcMon cannot open pml file for reading and CSV file cannot be created.
#14
mikenav777
closed
6 years ago
5
Remove base directory from File Activity
#13
Rurik
opened
7 years ago
2
request for clarification of documentation in the readme file
#12
sonofagl1tch
closed
7 years ago
4
Next