For these reasons, the interface is relatively stripped down: no tabs (it eats vertical space) and a single toolbar to switch views. And while Malcat’s user interface is modern with Hi-DPI and unicode support, you will find little eye-candy (beside few a few Color themes). In fact, we even chose wxWidgets as a library to give the tool a more natural look and feel. To summarize, this is a professional tool meant to be productive.| doc.malcat.fr
Installing the software| doc.malcat.fr
Malcat features numerous views, each one focusing on different aspect of the analysis. You can switch between views using the toolbar located on the top, or using one of the function key F1 … F10. For some of the views, hitting the shortcut key a second time can switch to another view. For instance, the Hexadecimal view is accessed using F2. Pressing F2 a second time switches to the Structure/text view.| doc.malcat.fr
Installing the software| doc.malcat.fr
Yara editor / browser| doc.malcat.fr
Why Malcat?| doc.malcat.fr
This class contains all structures identified by the File parsers. Note that all addresses used in this class are effective addresses. See Addressing in Malcat for more details.| doc.malcat.fr
This class contains all functions identified by the Functions recovery algorithm. Note that all addresses used in this class are effective addresses. See Addressing in Malcat for more details.| doc.malcat.fr
Accessing basic blocks| doc.malcat.fr
This class contains all the carved files extracted by the File carving algorithm. Note that all addresses used in this class are effective addresses. See Addressing in Malcat for more details.| doc.malcat.fr
© Copyright 2025, Malcat EI.| doc.malcat.fr
© Copyright 2025, Malcat EI.| doc.malcat.fr
Run Malcat from your python interpreter| doc.malcat.fr
Viewing| doc.malcat.fr
Data directories| doc.malcat.fr
Rules writing/importing guideline| doc.malcat.fr
A note on performances| doc.malcat.fr
Why Malcat?| doc.malcat.fr
Attributes| doc.malcat.fr
Kesakode lookup| doc.malcat.fr
Paid versions FAQ| doc.malcat.fr
This represents a single intelligence provider| doc.malcat.fr
FLIRT signatures precondition| doc.malcat.fr
How does it work?| doc.malcat.fr