Alternatives and similar repositories for drakvuf-sandbox

Users that are interested in drakvuf-sandbox are comparing it to the libraries listed below

• mandiant / capa-rules
  Standard collection of rules for capa: the tool for enumerating the capabilities of programs
  ☆664Updated this week
• cert-ee / cuckoo3
  Cuckoo3 is a Python 3 open source automated malware analysis system.
  ☆790Updated 3 weeks ago
• reversinglabs / reversinglabs-yara-rules
  ReversingLabs YARA Rules
  ☆887Updated 2 months ago
• CERT-Polska / karton
  Distributed malware processing framework based on Python, Redis and S3.
  ☆459Updated last month
• kevoreilly / CAPEv2
  Malware Configuration And Payload Extraction
  ☆2,912Updated this week
• MBCProject / mbc-markdown
  MBC content in markdown
  ☆513Updated 7 months ago
• saferwall / saferwall
  Collaborative Malware Analysis Platform at Scale
  ☆770Updated last month
• Rurik / Noriben
  Noriben - Portable, Simple, Malware Analysis Sandbox
  ☆1,215Updated 5 months ago
• Neo23x0 / yarGen
  yarGen is a generator for YARA rules
  ☆1,766Updated this week
• eset / malware-ioc
  Indicators of Compromises (IOC) of our various investigations
  ☆1,907Updated 3 weeks ago
• advanced-threat-research / Yara-Rules
  Repository of YARA rules made by Trellix ATR Team
  ☆626Updated 9 months ago
• mandiant / speakeasy
  Windows kernel and user mode emulation.
  ☆1,818Updated last week
• DissectMalware / XLMMacroDeobfuscator
  Extract and Deobfuscate XLM macros (a.k.a Excel 4.0 Macros)
  ☆587Updated last year
• tklengyel / drakvuf
  DRAKVUF Black-box Binary Analysis
  ☆1,191Updated 2 months ago
• StrangerealIntel / CyberThreatIntel
  Analysis of malware and Cyber Threat Intel of APT and cybercriminals groups
  ☆722Updated 3 years ago
• Velocidex / WinPmem
  The multi-platform memory acquisition tool.
  ☆924Updated 2 months ago
• ION28 / BLUESPAWN
  An Active Defense and EDR software to empower Blue Teams
  ☆1,315Updated 2 years ago
• sophoslabs / IoCs
  Sophos-originated indicators-of-compromise from published reports
  ☆646Updated last month
• CERT-Polska / mwdb-core
  Malware repository component for samples & static configuration with REST API interface.
  ☆374Updated this week
• bartblaze / Yara-rules
  Collection of private Yara rules.
  ☆375Updated 3 weeks ago
• hasherezade / hollows_hunter
  Scans all running processes. Recognizes and dumps a variety of potentially malicious implants (replaced/implanted PEs, shellcodes, hooks,…
  ☆2,292Updated 2 months ago
• InQuest / malware-samples
  A collection of malware samples and relevant dissection information, most probably referenced from http://blog.inquest.net
  ☆926Updated last year
• binref / refinery
  High Octane Triage Analysis
  ☆807Updated last week
• decalage2 / ViperMonkey
  A VBA parser and emulation engine to analyze malicious macros.
  ☆1,115Updated last year
• Neo23x0 / munin
  Online hash checker for Virustotal and other services
  ☆841Updated 9 months ago
• JusticeRage / Manalyze
  A static analyzer for PE executables.
  ☆1,098Updated 2 years ago
• 0xrawsec / whids
  Open Source EDR for Windows
  ☆1,289Updated 2 years ago
• mandiant / flare-fakenet-ng
  FakeNet-NG - Next Generation Dynamic Network Analysis Tool
  ☆2,051Updated last month
• hasherezade / mal_unpack
  Dynamic unpacker based on PE-sieve
  ☆791Updated 3 months ago
• CERT-Polska / malduck
  Malduck is your ducky companion in malware analysis journeys
  ☆348Updated 6 months ago