dod-cyber-crime-center

DC3 Malware Configuration Parser (DC3-MWCP) is a framework for parsing configuration information from malware. The information extracted from malware includes items such as addresses, passwords, filenames, and mutex names.

Pyhidra is a Python library that provides direct access to the Ghidra API within a native CPython interpreter using jpype.