Alternatives and similar repositories for OpenEDRRules

Users that are interested in OpenEDRRules are comparing it to the libraries listed below

• CAPESandbox / community
  Community modules for CAPE Sandbox
  ☆101Updated last week
• levanvn / APT32_Deobfuscate
  My scripts to deobfuscate APT32 malware
  ☆27Updated 3 years ago
• zom3y3 / ssdc
  ssdeep cluster analysis for malware files
  ☆31Updated 5 years ago
• cmikke97 / Automatic-Malware-Signature-Generation
  Automatic Malware Signature Generation Tool
  ☆16Updated 3 years ago
• kevoreilly / capemon
  capemon: CAPE's monitor
  ☆125Updated last week
• killvxk / avclassplusplus
  AVCLASS++: Yet Another Massive Malware Labeling Tool
  ☆14Updated 5 years ago
• airbus-cert / yara-ttd
  Use YARA rules on Time Travel Debugging traces
  ☆92Updated 2 years ago
• avast / avast-ctu-cape-dataset
  ☆37Updated last year
• ThreatLabz / tools
  Tools developed by the Zscaler ThreatLabz Threat Intelligence team
  ☆83Updated last month
• JPCERTCC / QuasarRAT-Analysis
  QuasarRAT analysis tools and research report
  ☆27Updated last year
• splunk / PPLinject
  Inject unsigned DLL into Protected Process Light (PPL)
  ☆25Updated 3 months ago
• CybercentreCanada / Maco
  Maco - Malware config extractor framework
  ☆38Updated last week
• jonny-jhnson / Detecting-Process-Injection-Techniques
  This is a repository that is meant to hold detections for various process injection techniques.
  ☆34Updated 5 years ago
• Hullgj / report-parser
  Cuckoo Sandbox report parser into ransomware classifier
  ☆11Updated 6 years ago
• MacDue / ssdeep-windows-32_64
  ssdeep for python on windows
  ☆17Updated 7 years ago
• stratosphereips / yara-rules
  Repository of Yara rules created by the Stratosphere team
  ☆27Updated 4 years ago
• fxb-cocacoding / yara-signator
  Automatic YARA rule generation for Malpedia
  ☆161Updated 2 years ago
• elastic / siglearn
  Code for BH21 talk: "Generating YARA Rules by Classifying Malicious Byte Sequences"
  ☆17Updated 6 months ago
• lemmou / RansomNoteFiles
  ☆24Updated last year
• telsy-cyberops / research
  Telsy CTI Research Team
  ☆57Updated 4 years ago
• stoerchl / yara_zip_module
  ☆13Updated 2 years ago
• AragornTseng / Mem2Img
  Mem2Img: Memory-Resident Malware Detection via Convolution Neural Network
  ☆25Updated 4 years ago
• thewhiteninja / deobshell
  Powershell script deobfuscation using AST in Python
  ☆69Updated last year
• denisugarte / PowerDrive
  A tool for de-obfuscating PowerShell scripts
  ☆70Updated 6 years ago
• NexusFuzzy / NanoDump
  Tool to decrypt the configuration of NanoCore and dump all used plugins
  ☆11Updated 4 years ago
• ohjeongwook / PowerShellRunBox
  Dynamic PowerShell Analysis Framework Based Upon PowerShell Debugging Functionality
  ☆83Updated 2 years ago
• adava / CnCHunter
  This project fully automates the process of analyzing and exploiting IoT malware to find live CnC servers.
  ☆43Updated last year
• malpedia / signator-rules
  Collection of rules created using YARA-Signator over Malpedia
  ☆134Updated 9 months ago
• fox-it / cobaltstrike-beacon-data
  Open Dataset of Cobalt Strike Beacon metadata (2018-2022)
  ☆125Updated 3 years ago
• marcosd4h / sysmonx
  SysmonX - An Augmented Drop-In Replacement of Sysmon
  ☆215Updated 5 years ago