Alternatives and similar repositories for PeaceMaker

Users that are interested in PeaceMaker are comparing it to the libraries listed below

• marcosd4h / memhunter
  Live hunting of code injection techniques
  ☆382Updated 5 years ago
• hfiref0x / WDExtract
  Extract Windows Defender database from vdm files and unpack it
  ☆440Updated 5 years ago
• SafeBreach-Labs / pinjectra
  Pinjectra is a C/C++ OOP-like library that implements Process Injection techniques (with focus on Windows 10 64-bit)
  ☆812Updated 3 years ago
• D4stiny / spectre
  A Windows kernel-mode rootkit that abuses legitimate communication channels to control a machine.
  ☆702Updated 4 years ago
• NtRaiseHardError / Antimalware-Research
  Research on Anti-malware and other related security solutions
  ☆259Updated 4 years ago
• ewhitehats / InvisiblePersistence
  Persisting in the Windows registry "invisibly"
  ☆340Updated 6 years ago
• jthuraisamy / TelemetrySourcerer
  Enumerate and disable common sources of telemetry used by AV/EDR.
  ☆797Updated 4 years ago
• JLospinoso / gargoyle
  A memory scanning evasion technique
  ☆869Updated 8 years ago
• hugsy / CFB
  Canadian Furious Beaver is a ProcMon-style tool designed only for capturing IRPs sent to any Windows driver.
  ☆321Updated last year
• hasherezade / persistence_demos
  Demos of various (also non standard) persistence methods used by malware
  ☆221Updated 2 years ago
• hasherezade / process_doppelganging
  My implementation of enSilo's Process Doppelganging (PE injection technique)
  ☆610Updated 2 years ago
• mandiant / DueDLLigence
  ☆472Updated 2 years ago
• CylanceVulnResearch / ReflectiveDLLRefresher
  Universal Unhooking
  ☆321Updated 6 years ago
• endgameinc / ClrGuard
  ☆216Updated 7 years ago
• theevilbit / injection
  ☆814Updated 5 years ago
• jdu2600 / Windows10EtwEvents
  Events from all manifest-based and mof-based ETW providers across Windows 10 versions
  ☆299Updated last year
• commial / experiments
  Expriments
  ☆458Updated 8 months ago
• rajiv2790 / FalconEye
  ☆298Updated 4 years ago
• hoangprod / AndrewSpecial
  AndrewSpecial, dumping lsass' memory stealthily and bypassing "Cilence" since 2019.
  ☆387Updated 6 years ago
• felixweyne / imaginaryC2
  Imaginary C2 is a python tool which aims to help in the behavioral (network) analysis of malware. Imaginary C2 hosts a HTTP server which …
  ☆447Updated 2 years ago
• 0xAlexei / WindowsDefenderTools
  Tools for instrumenting Windows Defender's mpengine.dll
  ☆298Updated 6 years ago
• antonioCoco / Mapping-Injection
  Just another Windows Process Injection
  ☆399Updated 4 years ago
• dalvarezperez / CreateFile_based_rootkit
  ☆135Updated 2 months ago
• forrest-orr / moneta
  Moneta is a live usermode memory analysis tool for Windows with the capability to detect malware IOCs
  ☆750Updated last year
• LloydLabs / Windows-API-Hashing
  This is a simple example and explanation of obfuscating API resolution via hashing
  ☆235Updated 5 years ago
• Cybereason / siofra
  ☆487Updated 7 years ago
• hasherezade / module_overloading
  A more stealthy variant of "DLL hollowing"
  ☆347Updated last year
• joesecurity / pafishmacro
  Pafish Macro is a Macro enabled Office Document to detect malware analysis systems and sandboxes. It uses evasion & detection techniques …
  ☆282Updated 7 years ago
• fox-it / mkYARA
  Generating YARA rules based on binary code
  ☆210Updated 3 years ago
• secrary / DrSemu
  DrSemu - Sandboxed Malware Detection and Classification Tool Based on Dynamic Behavior
  ☆272Updated 5 years ago