恶意软件分析工具Cerbero Suite Advanced 4.6.1

Cerbero Suite Advanced是最新的恶意软件分类和文件分析工具套件。分析许多文件格式，包括PE，Mach-O，ELF，Java，SWF，DEX，PDF，DOC，XLS，RTF，Zip等。自动分析，交互式分析，Carbon交互式反汇编程序，字节码反汇编程序（.NET MSIL，Java，DEX，ActionScript2 / 3，VBA，字体），带布局的十六进制编辑器，Windows内存分析（原始转储，WinDmp文件，休眠文件），JavaScript调试器，极其丰富的Python3 SDK，扩展支持，C ++ / PDB结构导入器，对项目和书签的支持。完全多平台（Windows，Linux，OS X）。访问我们的博客以查看Cerbero Suite的实际应用！

File size: 73.3 MB

State-of-the-art suite of tools for malware triage and file analysis. Analysis for many file formats including PE, Mach-O, ELF, Java, SWF, DEX, PDF, DOC, XLS, RTF, Zip and many more. Automatic analysis, interactive analysis, Carbon Interactive Disassembler, byte-code disassemblers (.NET MSIL, Java, DEX, ActionScript2/3, VBA, fonts), hex editor with layouts, Windows memory analysis (raw dumps, WinDmp files, hibernation files), JavaScript debugger, extremely rich Python3 SDK, extension support, C++/PDB structures importer, support for projects and bookmarks. Completely multi-platform (Windows, Linux, OS X). Visit our blog to see Cerbero Suite in action!

This is a list of some relevant features of Cerbero Suite Advanced. Please note that it is not possible to enumerate all features because of the complexity and on-going improvement of the product.
Carbon Interactive Disassembler
Supported file formats:
Email (EML)
Extraction of attachments
Torrent
Windows Dmp files (WINDMP)
Inspection of internal structures
Full inspection of memory when available
Windows Hibernation files
Inspection of internal structures
Full inspection of memory
Windows Raw Memory Images (WINMEM)
Support for all Windows editions
Inspection of files in memory
Inspection of SSDT, IDT, GDT
Suppport for VAD trees
User address spaces
System address space
System symbols of all supported Windows editions