{"id":52037561,"url":"https://github.com/adobe/obfuscation-detection","last_synced_at":"2026-08-01T21:02:55.508Z","repository":{"id":44683944,"uuid":"392369767","full_name":"adobe/obfuscation-detection","owner":"adobe","description":null,"archived":false,"fork":false,"pushed_at":"2025-05-22T23:24:47.000Z","size":49755,"stargazers_count":43,"open_issues_count":2,"forks_count":10,"subscribers_count":8,"default_branch":"main","last_synced_at":"2026-04-26T16:12:40.234Z","etag":null,"topics":[],"latest_commit_sha":null,"homepage":null,"language":"Python","has_issues":true,"has_wiki":null,"has_pages":null,"mirror_url":null,"source_name":null,"license":"apache-2.0","status":null,"scm":"git","pull_requests_enabled":true,"icon_url":"https://github.com/adobe.png","metadata":{"files":{"readme":"README.md","changelog":null,"contributing":"CONTRIBUTING.md","funding":null,"license":"LICENSE","code_of_conduct":"CODE_OF_CONDUCT.md","threat_model":null,"audit":null,"citation":null,"codeowners":null,"security":null,"support":null}},"created_at":"2021-08-03T15:50:57.000Z","updated_at":"2026-02-23T11:20:31.000Z","dependencies_parsed_at":"2022-09-10T08:00:19.492Z","dependency_job_id":null,"html_url":"https://github.com/adobe/obfuscation-detection","commit_stats":null,"previous_names":["adobe/si-obfuscation-detection"],"tags_count":0,"template":false,"template_full_name":null,"purl":"pkg:github/adobe/obfuscation-detection","repository_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/adobe%2Fobfuscation-detection","tags_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/adobe%2Fobfuscation-detection/tags","releases_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/adobe%2Fobfuscation-detection/releases","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/adobe%2Fobfuscation-detection/manifests","owner_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/adobe","download_url":"https://codeload.github.com/adobe/obfuscation-detection/tar.gz/refs/heads/main","sbom_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/adobe%2Fobfuscation-detection/sbom","scorecard":null,"host":{"name":"GitHub","url":"https://github.com","kind":"github","repositories_count":286080680,"owners_count":36170392,"icon_url":"https://github.com/github.png","version":null,"created_at":"2022-05-30T11:31:42.601Z","updated_at":"2026-07-20T02:08:10.276Z","status":"online","status_checked_at":"2026-08-01T02:00:05.789Z","response_time":100,"last_error":null,"robots_txt_status":"success","robots_txt_updated_at":"2025-07-24T06:49:26.215Z","robots_txt_url":"https://github.com/robots.txt","online":true,"can_crawl_api":true,"host_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub","repositories_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories","repository_names_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repository_names","owners_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners"}},"keywords":[],"created_at":"2026-08-01T21:02:54.714Z","updated_at":"2026-08-01T21:02:55.481Z","avatar_url":"https://github.com/adobe.png","language":"Python","funding_links":[],"categories":[],"sub_categories":[],"readme":"# Command Obfuscation Detection\n\nThis project currently only supports cmd.exe command obfuscation detection on Windows. In a previous iteration of this project, we used deep learning. Now, we have shifted the approach towards XGBoost instead.\n\n- Blog post: https://medium.com/adobetech/using-deep-learning-to-better-detect-command-obfuscation-965b448973e0\n- Pip package: https://pypi.org/project/obfuscation-detection/\n\n## Quick Installation\n\nYou can install our package through pip!\n```\npip install obfuscation-detection\n```\n\nThis is a basic usage of our package:\n```\nfrom obfuscation_detection import ObfuscationDetectionClassifier\n\nmodel = ObfuscationDetectionClassifier()\ncommands = ['cmd.exe /c \"echo Invoke-DOSfuscation\"',\n            'cm%windir:~ -4, -3%.e^Xe,;^,/^C\",;,S^Et ^^o^=fus^cat^ion\u0026,;,^se^T ^ ^ ^B^=o^ke-D^OS\u0026\u0026,;,s^Et^^ d^=ec^ho I^nv\u0026\u0026,;,C^Al^l,;,^%^D%^%B%^%o^%\"',\n            'cat /etc/passwd']\ny = model.predict(commands)\ny_prob = model.predict_proba(commands)\n\n# 1 is obfuscated, 0 is non-obfuscated\nprint(y) # [0, 1, 0]\nprint(y_prob)\n```\n\n## Usage\n1. Install python dependencies: `pip install -r requirements.txt`\n\n2. For quick usage, give a .csv file with column `commands` and you can run the commands through the model: `python obfuscation_detection/main.py --filename commands.csv`\n\n3. You can also write your own scripts to use the model class directly: `python obfuscation_detection/model.py`\n\n### Contributing\n\nContributions are welcomed! Read the [Contributing Guide](./CONTRIBUTING.md) for more information.\n\n### Licensing\n\nThis project is licensed under the Apache V2 License. See [LICENSE](LICENSE) for more information.\n","project_url":"https://awesome.ecosyste.ms/api/v1/projects/github.com%2Fadobe%2Fobfuscation-detection","html_url":"https://awesome.ecosyste.ms/projects/github.com%2Fadobe%2Fobfuscation-detection","lists_url":"https://awesome.ecosyste.ms/api/v1/projects/github.com%2Fadobe%2Fobfuscation-detection/lists"}