Quote:State-of-the-art suite of tools for malware triage and file analysis. Analysis for many file formats including PE, Mach-O, ELF, Java, SWF, DEX, PDF, DOC, XLS, RTF, Zip and many more. Automatic analysis, interactive analysis, Carbon Interactive Disassembler, byte-code disassemblers (.NET MSIL, Java, DEX, ActionScript2/3, VBA, fonts), hex editor with layouts, Windows memory analysis (raw dumps, WinDmp files, hibernation files), JavaScript debugger, extremely rich Python3 SDK, extension support, C++/PDB structures importer, support for projects and bookmarks. Completely multi-platform (Windows, Linux, OS X). Visit our blog to see Cerbero Suite in action!
This is a list of some relevant features of Cerbero Suite Advanced. Please note that it is not possible to enumerate all features because of the complexity and on-going improvement of the product.
Carbon Interactive Disassembler
Supported file formats
Email (EML)
Extraction of attachments
Torrent
Windows Dmp files (WINDMP)
Inspection of internal structures
Full inspection of memory when available
Windows Hibernation files
Inspection of internal structures
Full inspection of memory
Windows Raw Memory Images (WINMEM)
Support for all Windows editions
Inspection of files in memory
Inspection of SSDT, IDT, GDT
Suppport for VAD trees
User address spaces
System address space
System symbols of all supported Windows editions

[To see links please register or login]