Report an incident
Read in Polish Read in polish
  • About us
  • News
  • FAQ
  • Analyses
  • Annual reports
  • Contact
Tag #tools
  • 20 August 2021 Manorit Chawdhry #malware #drakvuf #tools

    Linux Injector for automated malware analysis

    Article thumbnail

    Guest post by our Google Summer of Code student, Manorit Chawdhry Project proposal: https://summerofcode.withgoogle.com/projects/#6209067233574912 Motivation Wait, what? Malware on Linux? Yup, you read it right. Linux malware isn't given much importance in our community, as Windows is the most targeted operating system for malicious attacks …

    Read more
  • 20 August 2021 Jan Gruber #malware #tools #drakvuf

    HID simulation for DRAKVUF

    Article thumbnail

    Guest post by our Google Summer of Code student, Jan Gruber Project proposal: https://summerofcode.withgoogle.com/projects/#6703931754807296 Overview My project for GSoC 2021 was to realize an undetectable simulation of human behaviour in the VMI-based sandbox DRAKVUF, which resulted in the contribution of a plugin named hidsim - short …

    Read more
  • 14 May 2021 Jarosław Jedynak #karton #malware #mwdb #tools

    Karton Gems 3: Malware extraction with malduck

    Article thumbnail

    Table of contents Getting Started Your first karton Malware extraction with malduck Introduction Today we'll continue topics started in the first part of the tutorial. We'll learn about malduck, what can it do and how to write your own modules. Later we'll also show how to integrate it with Karton …

    Read more
  • 29 April 2021 Jarosław Jedynak #karton #malware #mwdb #tools

    Karton Gems 2: Your first karton

    Article thumbnail

    Table of contents Getting Started Your first karton Malware extraction with malduck Introduction In the last part, we've explained how to set up a simple Karton pipeline and start your tasks. If you haven't already, it's probably a good idea to read it now. Or you can clone the karton-playground …

    Read more
  • 21 April 2021 Jarosław Jedynak #karton #malware #mwdb #tools

    Karton Gems 1: Getting Started

    Article thumbnail

    Table of contents Getting Started Your first karton Malware extraction with malduck What is Karton? Karton is a framework for microservice orchestration, designed by security researchers for security researchers (but flexible enough to be used everywhere). It shines in scenarios where there is a clear separation of "input" and "output …

    Read more
  • 30 December 2020 Jarosław Jedynak #tools #malware #karton #mwdb

    Set up your own malware analysis pipeline with Karton

    Article thumbnail

    We proudly announce that today we open-source a large part of our analysis framework and pipeline! If you want to try it – check out Karton project on GitHub. What is karton? Karton is a robust framework for lightweight and flexible analysis backends. It can be used to connect malware analysis …

    Read more
  • 21 October 2020 Paweł Srokosz #malware #tools

    Set up your own malware repository with MWDB Core

    Article thumbnail

    We proudly announce that the open-source version of MWDB Core has been released! If you want to try it – check out mwdb-core project on GitHub. What is MWDB Core? MWDB Core is a malware repository for automated malware collection and analysis systems, developed by CERT Polska. You can set it …

    Read more
  • 18 December 2019 CERT Polska #malware #ransomware #tools

    Free decryption tool for Mapo ransomware

    Article thumbnail

    We are happy to announce that we are releasing a free decryption tool for the Mapo (a GarrantyDecrypt/Outsider variant) ransomware today. We would also like to thank Maciej Kotowicz of Kaspersky’s GReAT for sharing his insights on the ransomware’s encryption process. Our tool works with encrypted files …

    Read more
  • 21 February 2019 piotrb #malware #tools

    Strengthening our malware analysis capabilities

    Article thumbnail

    During last year we have collaborated with Hatching.io on improving the open source Cuckoo Sandbox. The main works were focused on porting advanced mechanisms for memory analysis which were developed internally by our team in the previous years. The public release of the onemon marks the last stage of …

    Read more
  • 16 January 2019 CERT Polska #malware #mwdb #tools

    MWDB – our way to share information about malicious software

    Article thumbnail

    Analysis of current threats is one of the most common challenges facing almost any organization dealing with cybersecurity. From year to year, it also becomes a harder nut to crack, being undoubtedly influenced by the growing scale of activities undertaken by criminals and the degree of their advancement. In the …

    Read more
1 2 »

The CERT Polska team operates within the structures of NASK (Research and Academic Computer Network) — a research institute which conducts scientific studies, operates the national .pl domain registry and provides advanced IT services.

Social media

Facebook Twitter GitHub

Contact

ul. Kolska 12, PL-01-045 Warsaw, Poland
tel.: +48 22 380 82 74
fax: +48 22 380 83 99
ePUAP: /NASK-Instytut/SkrytkaESP

E-mail: [email protected]
Incidents: [email protected]

Co-financed by the Connecting Europe Facility of The European Union
  • © 2022 NASK
  • Privacy policy
  • CSIRT GOV
  • CSIRT MON