Alternatives and similar repositories for InsightEngineering

Users that are interested in InsightEngineering are comparing it to the libraries listed below

• Faran-17 / Windows-Internals
  Important notes and topics on my journey towards mastering Windows Internals
  ☆426Updated last year
• magicsword-io / LOLDrivers
  Living Off The Land Drivers
  ☆1,378Updated this week
• Xacone / BestEdrOfTheMarket
  EDR Lab for Experimentation Purposes
  ☆1,409Updated 2 weeks ago
• cyberark / PipeViewer
  A tool that shows detailed information about named pipes in Windows
  ☆731Updated last year
• daem0nc0re / TangledWinExec
  PoCs and tools for investigation of Windows process execution techniques
  ☆953Updated this week
• matthieu-hackwitharts / Win32_Offensive_Cheatsheet
  Win32 and Kernel abusing techniques for pentesters
  ☆972Updated 2 years ago
• vu-ls / Crassus
  ☆614Updated 3 months ago
• Bw3ll / sharem
  SHAREM is a shellcode analysis framework, capable of emulating more than 20,000 WinAPIs and virutally all Windows syscalls. It also conta…
  ☆478Updated 7 months ago
• wavestone-cdt / EDRSandblast
  ☆1,777Updated last year
• itaymigdal / awesome-injection
  Centralized resource for listing and organizing known injection techniques and POCs
  ☆671Updated last month
• huntandhackett / process-cloning
  The Definitive Guide To Process Cloning on Windows
  ☆536Updated 2 years ago
• jstrosch / learning-malware-analysis
  This repository contains sample programs that mimick behavior found in real-world malware. The goal is to provide source code that can be…
  ☆683Updated last year
• ElliotKillick / operating-system-design-review
  Operating System Design Review: A systematic analysis of modern systems architecture
  ☆336Updated 3 weeks ago
• SafeBreach-Labs / PoolParty
  A set of fully-undetectable process injection techniques abusing Windows Thread Pools
  ☆1,240Updated 2 years ago
• tyranid / windows-security-internals
  A repository for additional files related to the book Windows Security Internals with PowerShell from No Starch Press.
  ☆219Updated 5 months ago
• persistence-info / persistence-info.github.io
  ☆520Updated 2 years ago
• yardenshafir / WinDbg_Scripts
  Useful scripts for WinDbg using the debugger data model
  ☆429Updated last year
• Accenture / Spartacus
  Spartacus DLL/COM Hijacking Toolkit
  ☆1,083Updated 2 years ago
• forrest-orr / moneta
  Moneta is a live usermode memory analysis tool for Windows with the capability to detect malware IOCs
  ☆801Updated last year
• akamai / akamai-security-research
  This repository includes code and IoCs that are the product of research done in Akamai's various security research teams.
  ☆523Updated 7 months ago
• hasherezade / mal_unpack
  Dynamic unpacker based on PE-sieve
  ☆796Updated 4 months ago
• VirtualAlllocEx / DEFCON-31-Syscalls-Workshop
  Contains all the material from the DEF CON 31 workshop "(In)direct Syscalls: A Journey from High to Low".
  ☆744Updated 8 months ago
• OALabs / hashdb
  Assortment of hashing algorithms used in malware
  ☆389Updated 3 weeks ago
• lsecqt / OffensiveCpp
  This repo contains C/C++ snippets that can be handy in specific offensive scenarios.
  ☆755Updated last year
• Dump-GUY / Malware-analysis-and-Reverse-engineering
  Some of my publicly available Malware analysis and Reverse engineering.
  ☆929Updated last year
• zodiacon / EtwExplorer
  View ETW Provider manifest
  ☆567Updated last year
• lasq88 / LearingMaterials
  Different learning materials
  ☆228Updated 4 months ago
• jstrosch / learning-reverse-engineering
  This repository contains sample programs written primarily in C and C++ for learning native code reverse engineering.
  ☆730Updated 2 months ago
• SafeBreach-Labs / WindowsDowndate
  A tool that takes over Windows Updates to craft custom downgrades and expose past fixed vulnerabilities
  ☆696Updated last year
• Squiblydoo / debloat
  A GUI and CLI tool for removing bloat from executables
  ☆441Updated 7 months ago