{"id":18303520,"url":"https://github.com/gosecure/malware_investigation_template","last_synced_at":"2025-04-12T15:23:48.983Z","repository":{"id":97083549,"uuid":"60559224","full_name":"GoSecure/malware_investigation_template","owner":"GoSecure","description":"Because .idb files should be version controlled.","archived":false,"fork":false,"pushed_at":"2016-07-13T18:19:08.000Z","size":3,"stargazers_count":4,"open_issues_count":0,"forks_count":2,"subscribers_count":3,"default_branch":"master","last_synced_at":"2025-04-05T15:35:29.596Z","etag":null,"topics":[],"latest_commit_sha":null,"homepage":null,"language":"Shell","has_issues":true,"has_wiki":null,"has_pages":null,"mirror_url":null,"source_name":null,"license":null,"status":null,"scm":"git","pull_requests_enabled":true,"icon_url":"https://github.com/GoSecure.png","metadata":{"files":{"readme":"README.adoc","changelog":null,"contributing":null,"funding":null,"license":null,"code_of_conduct":null,"threat_model":null,"audit":null,"citation":null,"codeowners":null,"security":null,"support":null,"governance":null,"roadmap":null,"authors":null,"dei":null,"publiccode":null,"codemeta":null}},"created_at":"2016-06-06T20:38:10.000Z","updated_at":"2023-03-13T03:49:44.000Z","dependencies_parsed_at":null,"dependency_job_id":"29f4b554-0184-46fe-8fa8-d71ea928107c","html_url":"https://github.com/GoSecure/malware_investigation_template","commit_stats":null,"previous_names":[],"tags_count":0,"template":false,"template_full_name":null,"repository_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/GoSecure%2Fmalware_investigation_template","tags_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/GoSecure%2Fmalware_investigation_template/tags","releases_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/GoSecure%2Fmalware_investigation_template/releases","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/GoSecure%2Fmalware_investigation_template/manifests","owner_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/GoSecure","download_url":"https://codeload.github.com/GoSecure/malware_investigation_template/tar.gz/refs/heads/master","host":{"name":"GitHub","url":"https://github.com","kind":"github","repositories_count":248587242,"owners_count":21129197,"icon_url":"https://github.com/github.png","version":null,"created_at":"2022-05-30T11:31:42.601Z","updated_at":"2022-07-04T15:15:14.044Z","host_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub","repositories_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories","repository_names_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repository_names","owners_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners"}},"keywords":[],"created_at":"2024-11-05T15:25:55.068Z","updated_at":"2025-04-12T15:23:48.957Z","avatar_url":"https://github.com/GoSecure.png","language":"Shell","funding_links":[],"categories":[],"sub_categories":[],"readme":"= Malware Investigation Template\n\nBecause `.idb` files should be version controlled.\n\n== Warning\n\nLarge binary files like `pcap` files don't belong in git. The repository will\nslow down once it reaches a few gigabytes. To avoid pushing `pcap` files by\nmistake the `pcaps/` directory is ignored in `.gitignore`.\n\n== Starting an investigation\n\n1. Fork this repository using github or via command-line (specify\n   investigation name):\n+\n    git clone https://github.com/GoSecure/malware_investigation_template.git Win32.Bad.A\n    cd Win32.Bad.A\n+\n2. Configure where the `pcaps` will be rsync'ed\n+\n    echo 'PCAP_DST=\u003crsync path spec\u003e' \u003e .config.sh\n+\n3. Get rid of original `.git` metadata and initialize new git tree\n+\n    rm -r .git/\n    git init\n\nVoilà!\n\nNOTE: Forks of public repositories can't be made private on github. It is\nadvised to use the command-line and push to a private repo if you plan on\nhosting your analysis on github.\n\n== Usage\n\n=== Pcaps\n\nA helper script has been provided to sync `pcap` files. Simply use `push`\ncommand to send files and `pull` to receive the files.\n\nFor example:\n\n    $ src/helpers/pcaps.sh push\n\n=== Integration with malboxes\n\n// TODO\n\nComing soon...\n\n== License\n\nI don't think this is copyright'able because it is just a bunch of directory\nnames, some documentation and a small script but just in case, here we go:\n\n    Under CC0 license: https://creativecommons.org/publicdomain/zero/1.0/\n    To the extent possible under law, GoSecure Inc. has waived all copyright and\n    related or neighboring rights to this repository's content.\n\n== Contribute\n\nContributions to this template are welcome!\n","project_url":"https://awesome.ecosyste.ms/api/v1/projects/github.com%2Fgosecure%2Fmalware_investigation_template","html_url":"https://awesome.ecosyste.ms/projects/github.com%2Fgosecure%2Fmalware_investigation_template","lists_url":"https://awesome.ecosyste.ms/api/v1/projects/github.com%2Fgosecure%2Fmalware_investigation_template/lists"}