mandiant/stringsifter

A machine learning tool that ranks strings based on their relevance for malware analysis.

69
/ 100
Established

This tool helps malware analysts quickly identify the most important text strings embedded within suspicious files, such as malware binaries. You provide a binary file or a raw list of extracted strings, and it outputs a prioritized list, highlighting those most relevant for understanding the malicious behavior. It's designed for security researchers and incident responders examining unknown or newly discovered threats.

754 stars. Available on PyPI.

Use this if you need to rapidly pinpoint critical indicators and functions by sifting through a large volume of strings extracted from malware samples, potentially speeding up your analysis workflow.

Not ideal if you are looking for a general-purpose string extraction utility without any relevance ranking, or if your primary focus is on obfuscated strings that require advanced de-obfuscation techniques before ranking.

malware-analysis reverse-engineering threat-intelligence incident-response
Maintenance 10 / 25
Adoption 10 / 25
Maturity 25 / 25
Community 24 / 25

How are scores calculated?

Stars

754

Forks

129

Language

Python

License

Apache-2.0

Last pushed

Mar 11, 2026

Commits (30d)

0

Dependencies

5

Get this data via API

curl "https://pt-edge.onrender.com/api/v1/quality/ml-frameworks/mandiant/stringsifter"

Open to everyone — 100 requests/day, no key needed. Get a free key for 1,000/day.