Alternatives and similar repositories for pico-ctf-2017-writeups

Users that are interested in pico-ctf-2017-writeups are comparing it to the libraries listed below

• akky2892 / Cyber-Threat-Hunting

  View on GitHub
  Information about most important hunts which can be performed by Threat hunters while searching for any adversary/threats inside the orga…
  ☆15May 18, 2019Updated 6 years ago
• Cainor / Calendarinho

  View on GitHub
  Manage Your Large Team of Consultants
  ☆11Sep 18, 2025Updated 4 months ago
• c0decave / Shellcode-Lab

  View on GitHub
  Training material for the Shellcode-Lab, including Slides and Codes
  ☆19Jun 13, 2019Updated 6 years ago
• dwmetz / PSHero

  View on GitHub
  PowerShell 'Hero': scripts for DFIR and automation with a PowerShell menu example.
  ☆36Jul 11, 2023Updated 2 years ago
• bromiley / pollen

  View on GitHub
  pollen - A command-line tool for interacting with TheHive
  ☆36Jun 6, 2019Updated 6 years ago
• slaughterjames / excelpeek

  View on GitHub
  ☆38Jan 3, 2022Updated 4 years ago
• acalarch / ETL-to-EVTX

  View on GitHub
  Powershell to read ETL file on an interval and convert it to an EVTX (so Windows Event Forwarding can 'subscribe')
  ☆11May 16, 2017Updated 8 years ago
• DissectMalware / base64_substring

  View on GitHub
  Generate a Yara rule to find base64-encoded files containg a specific keyword
  ☆40Jul 13, 2018Updated 7 years ago
• knu / FDclone

  View on GitHub
  A clone of FD (File & Directory tool) by T.Shirai
  ☆16Jan 29, 2014Updated 12 years ago
• noct / cutf

  View on GitHub
  Minimal C port of UTF8-CPP
  ☆12Jun 2, 2019Updated 6 years ago
• pkptzx / rawcopy-rs

  View on GitHub
  Primarily aimed at replicating files that cannot be directly copied due to being in use.
  ☆11Apr 22, 2024Updated last year
• Creapptor / passdock

  View on GitHub
  PassDock public issue tracker.
  ☆23Nov 11, 2014Updated 11 years ago
• adamkramer / reg_export

  View on GitHub
  ☆11Dec 14, 2016Updated 9 years ago
• DissectMalware / MalwareCMDMonitor

  View on GitHub
  Shows command lines used by latest instances analyzed on Hybrid-Analysis
  ☆42Sep 18, 2018Updated 7 years ago
• bluecapesecurity / drivefs_forensic_extractor

  View on GitHub
  Forensic tool for extracting and analyzing Google DriveFS cached files and metadata.
  ☆19May 9, 2025Updated 9 months ago
• StupidBird-Code / Malware_Analysize-Tools

  View on GitHub
  Here are some tools I developed to help analyze malware
  ☆11Nov 8, 2023Updated 2 years ago
• cenk / trcert-malware

  View on GitHub
  Daily updated malware indicator lists from TR-CERT (USOM), including parsed malicious URLs, IPs, and domains.
  ☆15Updated this week
• bsi-group / autorun-logger-server

  View on GitHub
  Server for receiving autorun data from the clients
  ☆13Sep 26, 2017Updated 8 years ago
• dwmetz / Axiom-PowerShell

  View on GitHub
  PowerShell scripts to aid investigators when utilizing O365 and Magnet Axiom.
  ☆12Aug 26, 2024Updated last year
• OSRDrivers / deleteex

  View on GitHub
  Demonstrate the new FileDispositionInfoEx behavior
  ☆14Nov 6, 2017Updated 8 years ago
• ttacon / emoji

  View on GitHub
  emoji for golang
  ☆10Aug 7, 2014Updated 11 years ago
• forensicmatt / libtsk-rs

  View on GitHub
  Wrapper for TSK (Sleuth Kit) Bindings
  ☆12Jan 10, 2023Updated 3 years ago
• RachitThukral / 8051

  View on GitHub
  Programming (8051)
  ☆11Nov 23, 2018Updated 7 years ago
• MKlimenko / EmbedResources

  View on GitHub
  MSVC C++ resource example
  ☆11Jun 28, 2018Updated 7 years ago
• ghonsa / DeviceDmp

  View on GitHub
  Windows device tree walker
  ☆15Sep 19, 2018Updated 7 years ago
• OSRDrivers / tunnel

  View on GitHub
  Demonstrate the behavior of the tunnel cache on Windows
  ☆10Aug 13, 2019Updated 6 years ago
• archerysec / archerysec-cli

  View on GitHub
  A commandline tool that wraps the Archerysec REST API for controlling Archery and executing quick, targeted scans.
  ☆11May 30, 2024Updated last year
• LWSS / evdev-mirror

  View on GitHub
  Experimental linux kernel module to mirror evdev inputs
  ☆16Aug 1, 2020Updated 5 years ago
• omerbenamram / winstructs

  View on GitHub
  Parsers for common structures across windows formats.
  ☆12Aug 23, 2023Updated 2 years ago
• w3c / string-meta

  View on GitHub
  How to add direction and language metadata to strings
  ☆14Oct 28, 2025Updated 3 months ago
• lilyball / go-osx-plist

  View on GitHub
  CoreFoundation Property List support for Go
  ☆28Nov 7, 2017Updated 8 years ago
• ydkhatri / spotlight_queries

  View on GitHub
  Queries for parsed spotlight database in sqlite
  ☆13Dec 29, 2020Updated 5 years ago
• Error-200 / Hack-X

  View on GitHub
  Python Tools
  ☆14Oct 1, 2020Updated 5 years ago
• robertdavidgraham / robutils

  View on GitHub
  A bunch of library code that can easily be included in new/prototype projects with few (usually zero) dependencies, even on themselves.
  ☆12Jul 26, 2020Updated 5 years ago
• elastic / sans-dfir-2022

  View on GitHub
  Repo with supporting material for the talk titled "Cracking the Beacon: Automating the extraction of implant configurations"
  ☆11Feb 6, 2025Updated last year
• iAbdullahMughal / espionage

  View on GitHub
  A basic python based tool for domain ℹ️ information gathering. I am working 💻 on collecting information related to domain whois, history…
  ☆12Jan 11, 2026Updated last month
• chrisdfir / sysmon2splunk

  View on GitHub
  The method and files used to generate Sysmon event logs, push them to a remote Splunk, and ingest/normalize the data for analysis.
  ☆10Sep 28, 2020Updated 5 years ago
• Lifka / WinProcessShot

  View on GitHub
  Monitoring Windows processes tool for malware analysis. Inspired by Regshot tool.
  ☆12Jun 24, 2024Updated last year
• pzia / nlconverter

  View on GitHub
  Simple python project using the COM (DDE) API under win32 to convert nsf documents databases to other formats, mainly targetting mbox & i…
  ☆10Apr 15, 2017Updated 8 years ago