Add FOR610 tool/workflow knowledge base and data pipeline
Build comprehensive malware analysis knowledge base from 3 sources: - SANS FOR610 course: 120 tools, 47 labs, 15 workflows, 27 recipes - REMnux salt-states: 340 packages parsed from GitHub - REMnux docs: 280+ tools scraped from docs.remnux.org Master inventory merges all sources into 447 tools with help tiers (rich/standard/basic). Pipeline generates: tools.db (397 entries), 397 cheatsheets with multi-tool recipes, 15 workflow guides, 224 TLDR pages, and coverage reports. Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>
This commit is contained in:
@@ -0,0 +1,18 @@
|
||||
# numbers-to-string.py
|
||||
# Convert sequences of decimal numbers to readable characters
|
||||
# FOR610 Labs: 3.3 | Sections: 3 | Author: Didier Stevens
|
||||
# Docs: https://docs.remnux.org/discover-the-tools/examine+static+properties/general
|
||||
|
||||
% decoding, deobfuscation, didier-stevens
|
||||
|
||||
# Basic usage
|
||||
oledump.py doc.docm -s A3 -v | numbers-to-string.py -j
|
||||
|
||||
|
||||
# --- Recipes (multi-tool chains) ---
|
||||
|
||||
# >> Decode VBA Number Arrays to Strings
|
||||
# Extract VBA and convert number sequences to text
|
||||
oledump.py <document> -s <stream> -v | numbers-to-string.py -j
|
||||
# Same but with line-break formatting for readability
|
||||
oledump.py <document> -s <stream> -v | numbers-to-string.py -j | sed 's/;/;\n/g'
|
||||
Reference in New Issue
Block a user