Aleph
An open-source malware analysis pipeline system that automates sample collection, processing, and JSON-based artifact storage.
What is Aleph?
Aleph is an open-source malware analysis pipeline system that automates the collection, processing, and storage of malware samples. It uses collectors to gather samples from sources like filesystems and email, runs analysis plugins to extract artifacts, and stores results as JSON in Elasticsearch for structured querying. The system replaces manual grep/regex workflows with an objective, scalable pipeline.
Security analysts, incident responders, and malware researchers who need to automate and scale malware sample analysis. It's also suitable for organizations building internal threat intelligence platforms.
Developers choose Aleph for its modular, extensible design that supports custom collectors and plugins, its ability to process samples in parallel for efficiency, and its structured JSON output that enables powerful querying via Elasticsearch instead of manual text processing.
Overview
An Open Source Malware Analysis Pipeline System
Use Cases
Best For
- Automating malware sample collection from diverse sources like email and local directories
Related Projects
Found a gem we're missing?
Open-Awesome is built by the community, for the community. Submit a project, suggest an awesome list, or help improve the catalog on GitHub.
