search

vipyrsec / dragonfly

A combined C2 and malware scanning service focused on the early identification, analysis, and reporting of malicious packages on the Python Package Index
MIT License
0 stars 0 forks source link

Powershell Reversal Tool #12

Closed import-pandas-as-numpy closed 1 year ago

import-pandas-as-numpy commented 1 year ago

Utilize documented behaviors from yara to dynamically generate a .ps1 file for the reversal of malicious actions from a specific package. This project will use regex to identify windows registry edits, file persistence locations, and the nature of exfiltrated data to generate a one-click script to recover from a malicious package.

import-pandas-as-numpy commented 1 year ago

Out of scope of our current project context.