Alternatives and similar repositories for OpenEDRRules

Users that are interested in OpenEDRRules are comparing it to the libraries listed below

• CAPESandbox / community
  Community modules for CAPE Sandbox
  ☆110Updated this week
• killvxk / avclassplusplus
  AVCLASS++: Yet Another Massive Malware Labeling Tool
  ☆14Updated 6 years ago
• airbus-cert / yara-ttd
  Use YARA rules on Time Travel Debugging traces
  ☆96Updated 2 years ago
• zom3y3 / ssdc
  ssdeep cluster analysis for malware files
  ☆31Updated 5 years ago
• levanvn / APT32_Deobfuscate
  My scripts to deobfuscate APT32 malware
  ☆27Updated 3 years ago
• JPCERTCC / QuasarRAT-Analysis
  QuasarRAT analysis tools and research report
  ☆28Updated 2 years ago
• MacDue / ssdeep-windows-32_64
  ssdeep for python on windows
  ☆18Updated 7 years ago
• jonny-jhnson / Detecting-Process-Injection-Techniques
  This is a repository that is meant to hold detections for various process injection techniques.
  ☆34Updated 5 years ago
• thewhiteninja / deobshell
  Powershell script deobfuscation using AST in Python
  ☆73Updated 4 months ago
• stratosphereips / yara-rules
  Repository of Yara rules created by the Stratosphere team
  ☆29Updated 4 years ago
• nasbench / SEDR-Internals
  Symantec EDR Internals
  ☆29Updated 4 years ago
• CybercentreCanada / Maco
  Maco - Malware config extractor framework
  ☆42Updated 3 weeks ago
• kevoreilly / capemon
  capemon: CAPE's monitor
  ☆145Updated last week
• ThreatLabz / tools
  Tools developed by the Zscaler ThreatLabz Threat Intelligence team
  ☆92Updated 2 months ago
• cmikke97 / Automatic-Malware-Signature-Generation
  Automatic Malware Signature Generation Tool
  ☆16Updated 4 years ago
• InQuest / yara-rules-vt
  Collection of YARA rules designed for usage through VirusTotal.com.
  ☆84Updated last year
• fox-it / cobaltstrike-beacon-data
  Open Dataset of Cobalt Strike Beacon metadata (2018-2022)
  ☆133Updated 3 years ago
• deepinstinct / DeMotet
  Unpacking and decryption tools for the Emotet malware
  ☆45Updated 4 years ago
• 0x534a / dynmx
  Signature-based detection of malware features based on Windows API call sequences. It's like YARA for sandbox API traces!
  ☆82Updated 2 years ago
• tccontre / KnowledgeBase
  Collection of tips, tools, arsenal and techniques I've learned during RE and other CyberSecStuff
  ☆57Updated 4 months ago
• malpedia / signator-rules
  Collection of rules created using YARA-Signator over Malpedia
  ☆142Updated last month
• adobe / obfuscation-detection
  ☆43Updated 8 months ago
• errbody / DPRK-Research
  ☆46Updated 2 months ago
• lemmou / RansomNoteFiles
  ☆24Updated last year
• Arun152k / Malware-Detection-using-N-Gram-Frequency
  An attempt to detect malware using Opcodes and Hexadecimal Instructions.
  ☆32Updated 4 years ago
• williballenthin / viv-utils
  Utilities for working with vivisect
  ☆26Updated 4 months ago
• adava / CnCHunter
  This project fully automates the process of analyzing and exploiting IoT malware to find live CnC servers.
  ☆43Updated last year
• 0xcpu / winsmsd
  Windows (ShadowMove) Socket Duplication
  ☆87Updated 5 years ago
• hasherezade / pe2pic
  Small visualizator for PE files
  ☆70Updated 2 years ago
• avast / avast-ctu-cape-dataset
  ☆44Updated last year