Detection and Classification

最新推荐文章于 2024-09-05 21:00:49 发布

xumesang

最新推荐文章于 2024-09-05 21:00:49 发布

阅读量824

点赞数

分类专栏：安全相关文章标签： Classification

本文链接：https://blog.youkuaiyun.com/xumesang/article/details/50837856

版权

28 篇文章

订阅专栏

本文概述了信息技术领域的多种工具和技术，包括PE分析、病毒检测、文件元数据读写、哈希计算、静态分析、多扫描框架等，旨在为读者提供一个全面的技术视角。

摘要生成于 C知道，由 DeepSeek-R1 满血版支持，前往体验 >

AnalyzePE – Wrapper for a variety of tools for reporting on Windows PE files.
chkrootkit – Local Linux rootkit detection.
ClamAV – Open source antivirus engine.
ExifTool – Read, write and edit file metadata.
hashdeep – Compute digest hashes with a variety of algorithms.
MASTIFF – Static analysis framework.
MultiScanner – Modular file scanning/analysis framework
nsrllookup – A tool for looking up hashes in NIST’s National Software Reference Library database.
packerid – A cross-platform Python alternative to PEiD.
PEiD – Packer identifier for Windows binaries.
PEV – A multiplatform toolkit to work with PE files, providing feature-rich tools for proper analysis of suspicious binaries.
Rootkit Hunter – Detect Linux rootkits.
ssdeep – Compute fuzzy hashes.
totalhash.py – Python script for easy searching of the TotalHash.com database.
TrID – File identifier.
YARA – Pattern matching tool for analysts.