Alternatives and similar repositories for OpenEDRRules

Users that are interested in OpenEDRRules are comparing it to the libraries listed below

• airbus-cert / yara-ttd
  Use YARA rules on Time Travel Debugging traces
  ☆96Updated 2 years ago
• CAPESandbox / community
  Community modules for CAPE Sandbox
  ☆107Updated this week
• killvxk / avclassplusplus
  AVCLASS++: Yet Another Massive Malware Labeling Tool
  ☆14Updated 5 years ago
• cmikke97 / Automatic-Malware-Signature-Generation
  Automatic Malware Signature Generation Tool
  ☆16Updated 4 years ago
• levanvn / APT32_Deobfuscate
  My scripts to deobfuscate APT32 malware
  ☆27Updated 3 years ago
• nasbench / SEDR-Internals
  Symantec EDR Internals
  ☆29Updated 4 years ago
• zom3y3 / ssdc
  ssdeep cluster analysis for malware files
  ☆31Updated 5 years ago
• telsy-cyberops / research
  Telsy CTI Research Team
  ☆57Updated 4 years ago
• kevoreilly / capemon
  capemon: CAPE's monitor
  ☆141Updated this week
• thewhiteninja / deobshell
  Powershell script deobfuscation using AST in Python
  ☆72Updated 2 months ago
• JPCERTCC / QuasarRAT-Analysis
  QuasarRAT analysis tools and research report
  ☆27Updated last year
• splunk / PPLinject
  Inject unsigned DLL into Protected Process Light (PPL)
  ☆28Updated 6 months ago
• NexusFuzzy / NanoDump
  Tool to decrypt the configuration of NanoCore and dump all used plugins
  ☆11Updated 4 years ago
• jonny-jhnson / Detecting-Process-Injection-Techniques
  This is a repository that is meant to hold detections for various process injection techniques.
  ☆34Updated 5 years ago
• Arun152k / Malware-Detection-using-N-Gram-Frequency
  An attempt to detect malware using Opcodes and Hexadecimal Instructions.
  ☆32Updated 4 years ago
• avast / avast-ctu-cape-dataset
  ☆43Updated last year
• Hullgj / report-parser
  Cuckoo Sandbox report parser into ransomware classifier
  ☆11Updated 6 years ago
• MacDue / ssdeep-windows-32_64
  ssdeep for python on windows
  ☆18Updated 7 years ago
• CybercentreCanada / Maco
  Maco - Malware config extractor framework
  ☆41Updated last month
• mandiant / win10_rekall
  Rekall Memory Forensic Framework
  ☆33Updated 6 years ago
• NtRaiseHardError / Kaiser
  Fileless persistence, attacks and anti-forensic capabilties.
  ☆94Updated 6 years ago
• marcosd4h / sysmonx
  SysmonX - An Augmented Drop-In Replacement of Sysmon
  ☆215Updated 6 years ago
• c3rb3ru5d3d53c / karton-unpacker
  A modular Karton Framework service that unpacks common packers like UPX and others using the Qiling Framework.
  ☆58Updated 4 years ago
• ThreatLabz / tools
  Tools developed by the Zscaler ThreatLabz Threat Intelligence team
  ☆89Updated 2 months ago
• SweetIceLolly / Prevent_File_Deletion
  Record & prevent file deletion in kernel mode
  ☆44Updated 5 years ago
• SinaKarvandi / Redemption-Anti-Ransomware
  A new idea to build an anti ransomware
  ☆24Updated 5 years ago
• dtrizna / SysmonRNN
  All necessary code in order to feed Sysmon data into Recurrent Neural Network
  ☆17Updated 5 years ago
• fxb-cocacoding / yara-signator
  Automatic YARA rule generation for Malpedia
  ☆164Updated 3 years ago
• asgarciap / etw-dns
  A simple example application to collect DNS queries logs using etw-api
  ☆21Updated 5 years ago
• adobe / obfuscation-detection
  ☆43Updated 6 months ago