Example Usage
import die, pathlib
print(die.scan_file("c:/windows/system32/ntdll.dll", die.ScanFlags.DEEP_SCAN))
'PE64'
print(die.scan_file("../upx.exe", die.ScanFlags.RESULT_AS_JSON, str(die.database_path) ))
{
"detects": [
{
"filetype": "PE64",
"parentfilepart": "Header",
"values": [
{
"info": "Console64,console",
"name": "GNU linker ld (GNU Binutils)",
"string": "Linker: GNU linker ld (GNU Binutils)(2.28)[Console64,console]",
"type": "Linker",
"version": "2.28"
},
{
"info": "",
"name": "MinGW",
"string": "Compiler: MinGW",
"type": "Compiler",
"version": ""
},
{
"info": "NRV,brute",
"name": "UPX",
"string": "Packer: UPX(4.24)[NRV,brute]",
"type": "Packer",
"version": "4.24"
}
]
}
]
}
for db in die.databases():
print(db)
\path\t
See also
horus
Open Source
An OSINT / digital forensics tool built in Python…
speakeasy
Open Source
Windows kernel and user mode emulation.…
Cortex-Analyzers
Open Source
The following repository is used by TheHive Project to develop and store Cortex analyzers & responde…
PyrsistenceSniper
Open Source
We took PersistenceSniper, merged it with Python, and misspelled it on purpose. Meet PyrsistenceSnip…
ArkhamMirror
Open Source
Local-first AI-powered document intelligence platform for investigative journalism…
SM-A217F_forensics
Free
Samsung modem commands over USB serial connection and secret dialer codes extracted from system pack…