diff --git a/README.md b/README.md index 5860569..156e3bf 100644 --- a/README.md +++ b/README.md @@ -11,6 +11,7 @@ A curated list of awesome malware analysis tools and resources. Inspired by - [Malware Corpora](#malware-corpora) - [Detection and Classification](#detection-and-classification) - [Online Scanners and Sandboxes](#online-scanners-and-sandboxes) + - [Domain Analysis](#domain-analysis) - [Memory Forensics](#memory-forensics) - [Miscellaneous](#miscellaneous) - [Resources](#resources) @@ -63,6 +64,8 @@ A curated list of awesome malware analysis tools and resources. Inspired by ## Memory Forensics +*Tools for dissecting malware in memory images or running systems.* + * [FindAES](https://jessekornblum.livejournal.com/269749.html) - Find AES encryption keys in memory. * [Rekall](http://www.rekall-forensic.com/) - Memory analysis framework, @@ -74,6 +77,15 @@ A curated list of awesome malware analysis tools and resources. Inspired by * [WinDbg](https://msdn.microsoft.com/en-us/windows/hardware/hh852365) - Live memory inspection and kernel debugging for Windows systems. +## Domain Analysis + +*Inspect domains and IP addresses.* + +* [Dig](http://networking.ringofsaturn.com/) - Free online dig and other + network tools. +* [Whois](http://whois.domaintools.com/) - DomainTools free online whois + search. + ## Miscellaneous * [REMnux](https://remnux.org/) - Linux distribution and docker images for