Complete Claude skills toolkit for professional malware analysis. 5 specialized skills covering triage, dynamic analysis, detection engineering, and reporting. Works with REMnux/FlareVM offline environments.
-
Updated
Apr 12, 2026 - Python
Complete Claude skills toolkit for professional malware analysis. 5 specialized skills covering triage, dynamic analysis, detection engineering, and reporting. Works with REMnux/FlareVM offline environments.
This project focuses on static and dynamic malware analysis using REMnux and FlareVM. It involves setting up analysis environments on both platforms to examine malware behavior, dissect malicious code, and understand threat vectors. Goals: enhance malware detection, improve analysis techniques, and strengthen overall cybersecurity defenses.
I explored advanced techniques for dissecting and understanding malicious software, diving deep into the intricate world of cybersecurity. From identifying potential threats to analyzing their behavior, every step of the process was a fascinating journey into digital security.
REMnux in a Box - Containerized Malware Analysis and fully operational within your Browser
Static and behavioral malware analysis of LokiBot using FlareVM, REMnux, VirusTotal, and Hybrid Analysis. Includes MITRE ATT&CK mapping and prevention guidance.
This repository contains two static malware analysis labs: one exploring Emotet using VirusTotal and Hybrid Analysis, and another focused on keylogger dissection using REMnux and PEStudio.
PCAP-based analysis of CryptoLocker and Word-Dropper malware samples using Wireshark and REMnux. Focus on DNS, HTTP, and TLS artifacts to identify adversary behavior and exfiltration attempts.
Static malware analysis in an isolated REMnux container — scored findings, IOC extraction, Markdown report.
This project uses REMnux and FlareVM for static and dynamic malware analysis, setting up secure environments to study malware behavior, dissect malicious code, and understand threat vectors. The goal is to improve detection, refine analysis skills, and strengthen overall cybersecurity defenses.
Static and dynamic malware analysis lab using REMnux, Ghidra, Procmon, Wireshark and FakeNet-NG.
This repository contains Dockerfile for the remnux-sift Docker image published in the Docker Hub: https://hub.docker.com/r/yara0/remnux-sift
A collection of triage and analysis scripts for SOC analysts and DFIR practitioners
A structured malware analysis lab covering static analysis, dynamic behavioral analysis, memory forensics, and detection engineering with Sigma and Wazuh.
Isolated FLARE-VM + REMnux detonation lab for safe malware analysis and detection development.
A modern, lightweight spiritual successor to INetSim, a suite of tools for simulating internet services in air-gapped malware-analysis environments
Add a description, image, and links to the remnux topic page so that developers can more easily learn about it.
To associate your repository with the remnux topic, visit your repo's landing page and select "manage topics."