About ConventionEngine
A collection of Yara rules for identifying malicious PEs with unique or suspicious PDB paths.
Tags
FAQ
Is ConventionEngine free?
Yes — ConventionEngine is listed as a free tool.
What is ConventionEngine used for?
A collection of Yara rules for identifying malicious PEs with unique or suspicious PDB paths.
What are the best alternatives to ConventionEngine?
Popular alternatives include 2019 BambooFox CTF Official Write Up Reverse, a-ray-grass, Abusing the COM Registry Structure: CLSID, LocalServer32, & InprocServer32, AndBug.