Capture-Py
Capture-Py copied to clipboard
fbruzzaniti
Capture-Py is a malware analysis tool that makes a copy of any files deleted or modified in a given directory and sub-directories. It was intended to be a subsitute for Capture-Bat on 64bit systems.
Should be do-able with scapy: https://stackoverflow.com/questions/33740583/writing-to-a-pcap-with-scapy
add an option to search hashes or upload samples to VT
Add an option for a file that contains directories not to capture from.
Metadata
Owner
Metadata
Capture-Py is a malware analysis tool that makes a copy of any files deleted or modified in a given directory and sub-directories. It was intended to be a subsitute for Capture-Bat on 64bit systems.