malicious-file-analysislisted

# Malicious File Analysis Malware analysis, file reputation, sandbox detonation, document forensics, reverse engineering, and hash lookup. ## Legal Notice All tools use publicly available information only. Users must comply with applicable laws and platform terms of service. Never execute unknown binaries outside of isolated sandbox environments. ## Tools Reference Read `skills/malicious-file-analysis/references/tools.md` for the complete list of 33 free tools in this category. ## Key command-line tools | Tool | Install | Usage | | ------ | --------- | ------- | | TYLabs QuickSand | `pip install quicksand` or `git clone https://github.com/nickvdp/quicksand.git && cd quicksand && pip install .` | `quicksand document.doc` | | detux | `git clone https://github.com/detuxsandbox/detux.git && cd detux && pip install -r requirements.txt` | `python detux.py -s sample.elf` | | OffVis | Download from `https://download.microsoft.com/download/1/2/7/127ba59a-4fe1-4acd-ba47-513ceef85a85/OffVis.zip`; requires .NET runtime (`apt install dotnet-runtime-6.0` or `wine`) | `OffVis.exe malicious.doc` | | PDF Tools (Didier Stevens) | `pip install pdfid pdf-parser` or `git clone https://github.com/DidierStevens/DidierStevensSuite.git` | `pdfid.py suspect.pdf && pdf-parser.py -s /JS suspect.pdf` | | Origami Framework | `gem install origami` or `apt install ruby && gem install origami` | `pdfwalker suspect.pdf` or `pdfcop suspect.pdf` | | Ghidra | `apt install default-jdk wget unzip && wget ht