Scripts to run within Ghidra, maintained by the Trellix ARC team

Repository of YARA rules made by Trellix ATR Team

An automatic unpacker and logger for DotNet Framework targeting files

A graphical user interface to easily read through, and filter, DotDumper JSON-based logs

The native (unmanaged) library which contains hooks for native functions that are hooked using DotDumper

A project created with an aim to emulate and test exfiltration of data over different network protocols.

Creosote is our solution to searching for the tarfile vulnerability described by CVE-2007-4559.

Repository with aggregated public source yara rules

Trellix Advanced Threat Research CTF compitition of 2022