Screenshots
Example Usage
from karton.core import Karton, Task, Resource
class GenericUnpacker(Karton):
"""
Performs sample unpacking
"""
identity = "karton.generic-unpacker"
filters = [
{
"type": "sample",
"kind": "runnable",
"platform": "win32"
}
]
def process(self, task: Task) -> None:
# Get sample object
packed_sample = task.get_resource('sample')
# Log with self.log
self.log.info(f"Hi {packed_sample.name}, let me analyze you!")
...
# Send our results for further processing or reporting
task = Task(
{
"type": "sample",
"kind": "raw"
}, payload = {
"parent": packed_sample,
"sample": Resource(filename, unpacked)
})
self.send_task(task)
if __name__ == "__main__":
GenericUnpacker.main()
See also
TRACE-Forensic-Toolkit
Open Source
Digital forensic analysis tool that provides a user-friendly interface for investigating disk images…
soSaver
Open Source
A Frida-based utility for dynamically extracting native (.so) libraries from Android applications.…
speakeasy
Open Source
Windows kernel and user mode emulation.…
Bulk Extractor
Open Source
Kali
Scans a disk image, file, or directory and extracts features such as email addresses, URLs, credit c…
PyrsistenceSniper
Open Source
We took PersistenceSniper, merged it with Python, and misspelled it on purpose. Meet PyrsistenceSnip…
joincap
Open Source
Merge multiple pcap files together, gracefully.…