A scalable python framework for security research and development teams.

Workbench focuses on simplicity, transparency, and easy on-site customization. As an open source python project it provides light-weight task management, execution and pipelining for a loosely-coupled set of python classes.

• Getting Started with Workbench
• Workbench Command Interface
• Workbench Command Interface 2
• Workbench Robust Client/Server
• Dive into PCAPs with Workbench
• Correlating Yara Sigs with Workbench

• PCAP to Graph (A short teaser)
• Workbench Demo
• Adding a new Worker (super hawt)
• PCAP to Dataframe
• PCAP DriveBy Analysis
• Using Neo4j for PE File Sim Graph
• Generator Pipelines Notebook
• Network Stream Analysis Notebook
• PE File Static Analysis Notebook
• Memory Analysis Notebook

• Yara Sigs: AlienVault, Crowdstrike, Mandiant, Viper, KevTheHermit

Warning!: The repository contains malcious data samples, be careful, exclude the workbench directory from AV, etc...

git clone https://github.com/supercowpowers/workbench.git

Workbench documentation: Workbench Docs

• Users Email List: workbench-users
• Developers Email List: workbench-devs