TraceTree

What is TraceTree?

TraceTree is an open-source runtime malware analysis tool built for deep behavioral tracing. Instead of just logging execution, it monitors live processes using severity-weighted syscall scoring and precise behavioral signatures to catch malicious activity as it happens. Designed to counter advanced threats like AI-driven runtime injections, it gives security researchers a clear, structured view of how binaries behave under the hood.