CAPE Sandbox
Isolated automated malware analysis and behavior reporting platform.
GPL-3.0
Reviewed Oct 12, 2026
Reviewed project metadata and official links for red, blue, purple, and cross-team security work.
This is a dated, editorially reviewed seed. Links go to upstream projects or vendors. A listing is not authorization, safety certification, legal advice, or a recommendation to deploy a tool. Confirm scope, licensing, current maintenance, and your organization's rules before use.
Isolated automated malware analysis and behavior reporting platform.
GPL-3.0
Reviewed Oct 12, 2026
Software reverse-engineering framework for malware and vulnerability research.
Apache-2.0 core with GPL-3.0 support programs and separately licensed third-party components.
Reviewed Oct 12, 2026
Indicator enrichment, analyzer orchestration, and threat-intelligence automation.
AGPL-3.0
Reviewed Oct 12, 2026
Threat-intelligence sharing and incident-context platform.
AGPL-3.0 core; data libraries can have separate terms.
Reviewed Oct 12, 2026
Curated malware-analysis Linux distribution and tool environment.
Composite distribution; every included tool retains its own license.
Reviewed Oct 12, 2026
Memory-forensics framework for Windows, Linux, and macOS evidence.
Volatility Software License 1.0.
Reviewed Oct 12, 2026
Pattern-matching engine for malware analysis, hunting, and detection engineering.
BSD-3-Clause
Reviewed Oct 12, 2026