CinCan

Blog & News
Tools
Pipelines
FAQ
Contact Us
Workshop

Search
GitLab

Welcome to the blog
Using continuous integration to automate incident response and malware analysis
Summer Hackathon: 3-days of Integrating CERT/CSIRT tools into automated incident response and malware analysis pipelines.
Cyberchess 2018 – an international cyber security conference
Analysing malicious PDF documents using Dockerized tools
Visualizing webserver's access log data to help detecting malicious activity
Disobey – The Nordic Security Event
Optimising and securing Dockerfiles
Determining the quality of TI feeds - Status report after one week of hacking
Tool for extracting possible IoC information from files
Short presentation about CinCan & Advent calendar
Day 1 - tshark
Day 2 - PDF-parser
Day 3 - ILSpy/ilspycmd
Day 4 - ClamAV
Day 5 - Apktool
Day 6 - Radamsa
Day 7 - Jsunpack-n
Day 8 - Oledump
Day 9 - Dex2Jar
Day 10 - Peepdf
Day 11 - Peframe
Day 12 - Virustotal
Day 13 - file
Day 14 - Ghidra - Headless Analyzer
Day 15 - strings
Day 16 - Jadx
Day 17 - The Sleuth Kit
Day 18 - binwalk
Day 19 - Oletools
Day 20 - radare2
Day 21: FireEye Labs Obfuscated String Solver (FLOSS)
Day 22 - Access.log visualization using Jupyter Notebook
Day 23: ioc-parser
Day 24 - Volatility
Sandboxing containers with gVisor
Throwback - What happened at Disobey 2020
CinCan vs CovidLock
Walk through of memory dump analysis from Disobey 2020 workshop, part 1
Investigating IoCs in malware using cincan command
Automating your .apk reverse engineering workflow
Fuzzycomparison - a tool for monitoring for changes in webpages
Dockerized Cortex and ioc_strings

Automating your .apk reverse engineering workflow

Automate your malware analysis workflows with Minion!

Read how it was done for Android .apk files here

INEA/CEF funded project worked on by NCSC-FI, JAMK University of Applied Sciences & University of Oulu

Search

From here you can search these documents. Enter your search terms below.