Signature-based detection of malware features based on Windows API call sequences. It's like YARA for sandbox API traces!
☆85Jun 28, 2023Updated 3 years ago
Alternatives and similar repositories for dynmx
Users that are interested in dynmx are comparing it to the libraries listed below. We may earn a commission when you buy through links labeled 'Ad' on this page.
Sorting:
- Indicators of compromise from to analysis and research by Nextron Threat Research team☆12Jun 2, 2026Updated last month
- Memory Scaner☆64Sep 9, 2022Updated 3 years ago
- Placeholder for my detection repo and misc detection engineering content☆43Oct 20, 2023Updated 2 years ago
- Conceptual Methods for Finding Commonalities in Macho Files☆13Mar 21, 2024Updated 2 years ago
- A Feature Rich Modular Malware Configuration Extraction Utility for MalDuck☆133Nov 25, 2023Updated 2 years ago
- Deploy to Railway using AI coding agents - Free Credits Offer • AdUse Claude Code, Codex, OpenCode, and more. Autonomous software development now has the infrastructure to match with Railway.
- ☆33Feb 26, 2022Updated 4 years ago
- Imphash-like calculation on Golang binaries☆50Jul 2, 2022Updated 4 years ago
- Repo containing my public talks☆24May 30, 2023Updated 3 years ago
- A Golang Discord C2 unlike any other. DCVC2 uses RTP packets over a voice channel to transmit all data leaving no operational traces in t…☆132Nov 5, 2024Updated last year
- Manage attack surface data on Elasticsearch☆27Nov 20, 2023Updated 2 years ago
- MacroExploit use in excel sheet☆21Jun 12, 2023Updated 3 years ago
- DLL Unlinking from InLoadOrderModuleList, InMemoryOrderModuleList, InInitializationOrderModuleList, and LdrpHashTable☆64Apr 4, 2026Updated 3 months ago
- A post-processing script for TinyTracer☆40Mar 22, 2023Updated 3 years ago
- Reasonably undetected shellcode stager and executer.☆34May 23, 2025Updated last year
- Managed Database hosting by DigitalOcean • AdPostgreSQL, MySQL, MongoDB, Kafka, Valkey, and OpenSearch available. Automatically scale up storage and focus on building your apps.
- A variation of ProcessOverwriting to execute shellcode on an executable's section☆147Dec 16, 2023Updated 2 years ago
- Only for educational purposes☆11Jun 17, 2023Updated 3 years ago
- Defeating Anti-Debugging Techniques for Malware Analysis☆12Oct 1, 2022Updated 3 years ago
- Detects CanaryTokens in Office docs and PDFs (docx, xlsx, pptx, pdf) without triggering alerts☆147Dec 23, 2025Updated 7 months ago
- ☆15Apr 4, 2019Updated 7 years ago
- ☆15Sep 26, 2022Updated 3 years ago
- Extract data of TTD trace file to a minidump☆30Jul 31, 2023Updated 2 years ago
- Rapidly Search and Hunt through Linux Forensics Artifacts☆213Mar 9, 2026Updated 4 months ago
- Powershell script to help Speed up Threat hunting incident response processes☆44Mar 31, 2026Updated 3 months ago
- End-to-end encrypted cloud storage - Proton Drive • AdSpecial offer: 40% Off Yearly / 80% Off First Month. Protect your most important files, photos, and documents from prying eyes.
- The book and code repo for the FREE Fundamental C++ book by Kevin Thomas.☆21Nov 26, 2025Updated 7 months ago
- Cmdlets for capturing Windows Events☆14Mar 11, 2022Updated 4 years ago
- Scripts and lists to help generate YARA friendly string mutations☆23Apr 9, 2023Updated 3 years ago
- Indicators of Normality☆11Jul 22, 2022Updated 4 years ago
- ☆18Nov 13, 2024Updated last year
- ☆23Dec 15, 2022Updated 3 years ago
- A dynamic unpacking tool☆152Sep 17, 2023Updated 2 years ago
- A tool to find folders excluded from AV real-time scanning using a time oracle☆233Feb 13, 2024Updated 2 years ago
- Tool that allows comparing symbol, type and syscall information of Microsoft Windows binaries across different versions of the OS, using …☆388Updated this week
- Proton VPN Special Offer - Get 70% off • AdSpecial partner offer. Trusted by over 100 million users worldwide. Tested, Approved and Recommended by Experts.
- Automatically spider the result set of a Censys/Shodan search and download all files where the file name or folder path matches a regex.☆29Apr 22, 2023Updated 3 years ago
- Small tool to play with IOCs caused by Imageload events☆47May 14, 2023Updated 3 years ago
- Searching .evtx logs for remote connections☆24Jul 6, 2023Updated 3 years ago
- Collection of Remote Management Monitoring tool artifacts, for assisting forensics and investigations☆105Aug 15, 2025Updated 11 months ago
- ☆40Aug 22, 2025Updated 11 months ago
- Code for BH21 talk: "Generating YARA Rules by Classifying Malicious Byte Sequences"☆17Feb 6, 2025Updated last year
- A command line Windows API tracing tool for Golang binaries.☆159Dec 4, 2023Updated 2 years ago