The Cryptographic Implementations Analysis Toolkit
(CIAT) is a compendium of command line and
graphical tools whose aim is to help in the
detection and analysis of encrypted byte sequences
within files (executable and non-executable). It
is particularly helpful in the forensic analysis
and reverse engineering of malware using
cryptographic code and encrypted payloads.