Alternatives and similar repositories for Signatures

Users that are interested in Signatures are comparing it to the libraries listed below

• nccgroup / mimikatz-detector-busylight
  USB HID driver emulation with PID/VID (0x3bca/0x27bb) of Plenom A/S Busylight Alpha, that is supported by Mimikatz. When mimikatz is exec…
  ☆20Updated 2 years ago
• bartblaze / DotNet-MetaData
  Identifies metadata of .NET binary files.
  ☆21Updated last year
• FarghlyMal / Config-Extractors
  ☆27Updated 6 months ago
• usualsuspect / yara_vt_mock
  Emulates the VirusTotal "vt" YARA module for livehunt rule debugging/testing
  ☆21Updated 2 years ago
• montysecurity / InfraSpyder
  Automatically spider the result set of a Censys/Shodan search and download all files where the file name or folder path matches a regex.
  ☆27Updated 2 years ago
• jstrosch / subparse
  Modular malware analysis artifact collection and correlation framework
  ☆53Updated last year
• elceef / yara-rulz
  Collection of generic YARA rules
  ☆16Updated 11 months ago
• anyrun / blog-scripts
  ☆30Updated 6 months ago
• woanware / etw-event-dumper
  ☆33Updated 3 years ago
• embee-research / Icedid-file-decryptor
  Static Decryptor for IcedID Malware
  ☆18Updated 2 years ago
• jfmaes / Emulation-Workshop
  The repository accompanying the Buer Emulation workshop
  ☆24Updated 3 years ago
• nullsection / SharpETW-Patch
  ☆23Updated last year
• matthw / malware_analysis
  ☆18Updated last year
• MITRECND / picaboo
  Specialized tool to dump Position Independent Code.
  ☆22Updated 4 years ago
• fr0gger / MalwareMuncher
  Malware Muncher is a proof-of-concept Python script that utilizes the Frida framework for binary instrumentation and API hooking, enablin…
  ☆43Updated 2 years ago
• daddycocoaman / volplugins
  Repository of Volatility3 plugins
  ☆21Updated 2 years ago
• olafhartong / PockETWatcher
  a tiny program to consume from ETW providers for research
  ☆48Updated 4 months ago
• CERT-Polska / karton-config-extractor
  Static configuration extractor for the Karton framework
  ☆10Updated 4 months ago
• hasherezade / pesieve-go
  Golang bindings for PE-sieve
  ☆43Updated last year
• whichbuffer / Antidebug
  Defeating Anti-Debugging Techniques for Malware Analysis
  ☆13Updated 2 years ago
• cod3nym / detection-rules
  Collection of my own detection rules
  ☆20Updated last year
• vysecurity / PacketParser
  A cap/pcap packet parser to make life easier when performing stealth/passive reconnaissance.
  ☆21Updated 10 months ago
• magicsword-io / bootloaders
  bootloaders.io is a curated list of known malicious bootloaders for various operating systems. The project aims to assist security profes…
  ☆60Updated last year
• jsecurity101 / LDAPMon
  ☆45Updated last year
• DISREL / Conti-Leaked-Playbook-TTPs
  MITRE TTPs derived from Conti's leaked playbooks from XSS.IS
  ☆38Updated 3 years ago
• ZephrFish / AutoHoneyPoC
  AutoPoC Generator HoneyPoC
  ☆35Updated last month
• ka7ana / CVE-2023-36025
  Quick test for CVE-2023-26025 behaviours
  ☆12Updated last year
• AhmedKamal1432 / Evilize
  Triaging Windows event logs based on SANS Poster
  ☆39Updated 2 years ago
• Squiblydoo / MalAPIReader
  Reads and prints information from the website MalAPI.io
  ☆19Updated 2 years ago
• hasherezade / pe2pic
  Small visualizator for PE files
  ☆69Updated last year