Alternatives and similar repositories for InsightEngineering

Users that are interested in InsightEngineering are comparing it to the libraries listed below

• magicsword-io / LOLDrivers
  Living Off The Land Drivers
  ☆1,172Updated this week
• wavestone-cdt / EDRSandblast
  ☆1,646Updated 8 months ago
• daem0nc0re / TangledWinExec
  PoCs and tools for investigation of Windows process execution techniques
  ☆916Updated 2 months ago
• Faran-17 / Windows-Internals
  Important notes and topics on my journey towards mastering Windows Internals
  ☆383Updated last year
• Xacone / BestEdrOfTheMarket
  AV/EDR Evasion Lab for Training & Learning Purposes
  ☆1,248Updated 2 weeks ago
• matthieu-hackwitharts / Win32_Offensive_Cheatsheet
  Win32 and Kernel abusing techniques for pentesters
  ☆951Updated last year
• vu-ls / Crassus
  ☆572Updated 2 weeks ago
• Accenture / Spartacus
  Spartacus DLL/COM Hijacking Toolkit
  ☆1,041Updated last year
• cyberark / PipeViewer
  A tool that shows detailed information about named pipes in Windows
  ☆642Updated 6 months ago
• SafeBreach-Labs / PoolParty
  A set of fully-undetectable process injection techniques abusing Windows Thread Pools
  ☆1,098Updated last year
• forrest-orr / moneta
  Moneta is a live usermode memory analysis tool for Windows with the capability to detect malware IOCs
  ☆744Updated last year
• itaymigdal / awesome-injection
  Centralized resource for listing and organizing known injection techniques and POCs
  ☆489Updated 3 weeks ago
• Velocidex / WinPmem
  The multi-platform memory acquisition tool.
  ☆790Updated 5 months ago
• netero1010 / EDRSilencer
  A tool uses Windows Filtering Platform (WFP) to block Endpoint Detection and Response (EDR) agents from reporting security events to the …
  ☆1,653Updated 6 months ago
• ElliotKillick / operating-system-design-review
  Operating System Design Review: A systemic analysis of modern systems architecture
  ☆312Updated 2 months ago
• daem0nc0re / PrivFu
  Kernel mode WinDbg extension and PoCs for token privilege investigation.
  ☆861Updated 3 months ago
• Cracked5pider / Stardust
  A modern 32/64-bit position independent implant template
  ☆1,210Updated last month
• Mr-Un1k0d3r / EDRs
  ☆2,097Updated 2 years ago
• nasbench / EVTX-ETW-Resources
  Event Tracing For Windows (ETW) Resources
  ☆379Updated 7 months ago
• huntandhackett / process-cloning
  The Definitive Guide To Process Cloning on Windows
  ☆476Updated last year
• Bw3ll / sharem
  SHAREM is a shellcode analysis framework, capable of emulating more than 20,000 WinAPIs and virutally all Windows syscalls. It also conta…
  ☆388Updated last week
• cyberark / RPCMon
  RPC Monitor tool based on Event Tracing for Windows
  ☆355Updated 8 months ago
• zodiacon / EtwExplorer
  View ETW Provider manifest
  ☆482Updated 6 months ago
• hasherezade / mal_unpack
  Dynamic unpacker based on PE-sieve
  ☆730Updated 2 months ago
• wietze / HijackLibs
  Project for tracking publicly disclosed DLL Hijacking opportunities.
  ☆753Updated this week
• yardenshafir / WinDbg_Scripts
  Useful scripts for WinDbg using the debugger data model
  ☆412Updated last year
• lasq88 / LearingMaterials
  Different learning materials
  ☆226Updated 2 months ago
• persistence-info / persistence-info.github.io
  ☆490Updated last year
• LETHAL-FORENSICS / MemProcFS-Analyzer
  MemProcFS-Analyzer - Automated Forensic Analysis of Windows Memory Dumps for DFIR
  ☆623Updated 2 months ago
• ergrelet / windiff
  Web-based tool that allows comparing symbol, type and syscall information of Microsoft Windows binaries across different versions of the …
  ☆343Updated 2 weeks ago