Threat Pursuit Virtual Machine (VM): A fully customizable, open-sourced Windows-based distribution focused on threat intelligence analysis and hunting designed for intel and malware analysts as well as threat hunters to get up and running quickly.

FireEye Alert json files to MISP Malware information sharing plattform (Alpha)

To stop the all seeing eye of Sauron and make your MacBook operate as it should be.

SpyCore - Windows Malicious FIle Scanner (Distributes)

Python API bindings for FireEye Products

EmailScanner is an integration application in python that uses `exchangelib` to process mail items in Microsoft exchange.

Publicly available threat intelligence reports

Extracts the Timeline of a Redline parsed sqlite database so it can be used e.g. in an ELK stack.

Tracking the Solarwinds Hack.

PowerShell implementation of FireEyeHX API v3

Assemblyline 4 Obfuscated string solver

McAfee Total Protection provides real‑time antivirus scanning, web and email threat blocking, firewall management, password manager, file encryption, identity theft monitoring, and secure VPN for up to five devices, with automatic updates and centralized control.

Parses the Redline CSV output in a csv that is importable by timesketch