恶意软件静态分析框架。（Malware static analysis framework）
MASTIFF 是一个静态分析框架，它自动地从许多不同的文件格式中提取关键特征。为了确保框架保持灵活性和可扩展性，使用了一组社区驱动的插件来执行文件分析和数据提取。虽然最初设计用于支持恶意软件、入侵和取证分析，但该框架非常适合支持更广泛的分析需求。简而言之，MASTIFF 允许分析人员专注于分析，而不是弄清楚如何解析文件。
MASTIFF 项目托管于：
https://git.korelogic.com/mastiff.git/
一般文档位于 docs 目录中。见 README.INSTALL 文件。以获得关于如何构建、测试和安装框架的说明。
本软件发布的条款和条件是在 README.LICENSE 中阐述。
| Name With Owner | KoreLogicSecurity/mastiff |
|---|---|
| Primary Language | Python |
| Program language | Makefile (Language Count: 4) |
| Platform | Linux |
| License: |
| Created At | 2014-07-15 20:23:52 |
|---|---|
| Pushed At | 2020-04-01 08:50:18 |
| Last Commit At | 2015-09-22 21:26:56 |
| Release Count | 2 |
| Last Release Name | V0_7_0_DS1 (Posted on 2014-03-25 14:45:55) |
| First Release Name | 0.6.0 (Posted on 2014-01-10 11:02:05) |
| Stargazers Count | 177 |
|---|---|
| Watchers Count | 17 |
| Fork Count | 42 |
| Commits Count | 67 |
| Has Issues Enabled | |
| Issues Count | 0 |
| Issue Open Count | 0 |
| Pull Requests Count | 0 |
| Pull Requests Open Count | 2 |
| Pull Requests Close Count | 0 |
| Has Wiki Enabled | |
|---|---|
| Is Archived | |
| Is Fork | |
| Is Locked | |
| Is Mirror | |
| Is Private |
REVISION
$Id$
OVERVIEW
MASTIFF is a static analysis framework that automates the process of
extracting key characteristics from a number of different file
formats. To ensure the framework remains flexible and extensible, a
community-driven set of plug-ins is used to perform file analysis
and data extraction. While originally designed to support malware,
intrusion, and forensic analysis, the framework is well-suited to
support a broader range of analytic needs. In a nutshell, MASTIFF
allows analysts to focus on analysis rather than figuring out how to
parse files.
The MASTIFF Project is hosted at:
https://git.korelogic.com/mastiff.git/
DOCUMENTATION
General documentation is located in the docs directory. See the
README.INSTALL file for instructions on how to build, test, and
install the framework.
LICENSE
The terms and conditions under which this software is released are
set forth in README.LICENSE.