Alternatives and similar repositories for etl2pcapng

Users that are interested in etl2pcapng are comparing it to the libraries listed below

• Techlord-RCE / VB-Exe-Parser

  View on GitHub
  VB Exe Parser is an IDA script written in Python. This script will help you to parse VB program internal structures. It can find: Event, …
  ☆18Oct 7, 2016Updated 9 years ago
• tbarabosch / apihash_to_yara

  View on GitHub
  Generates YARA rules to detect malware using API hashing
  ☆17Mar 16, 2021Updated 4 years ago
• wietze / bsides-ldn-2019

  View on GitHub
  Code and Slides of my BSides London 2019 presentation about Attacker Emulation using CALDERA
  ☆22Jun 9, 2019Updated 6 years ago
• evild3ad / isodump

  View on GitHub
  isodump - ISO dump utility
  ☆41Jun 9, 2019Updated 6 years ago
• dtmsecurity / 3aj-lib

  View on GitHub
  Proof of concept communications from C# via a web browser process
  ☆21Feb 15, 2019Updated 7 years ago
• jp-slackspace / x-tension-c-sharp

  View on GitHub
  An updated C# port of X-Ways X-Tensions API.
  ☆11Mar 12, 2018Updated 7 years ago
• chrisdfir / sysmon2splunk

  View on GitHub
  The method and files used to generate Sysmon event logs, push them to a remote Splunk, and ingest/normalize the data for analysis.
  ☆10Sep 28, 2020Updated 5 years ago
• YossiSassi / AD-Replication-Metadata

  View on GitHub
  Track previous changes on specific AD accounts (users, computers) and Groups (online DC), even if event logs were wiped/not collected (e.…
  ☆16Feb 25, 2025Updated 11 months ago
• PwCUK-CTO / rtfsig

  View on GitHub
  A tool to help malware analysts signature unique parts of RTF documents
  ☆29Jan 5, 2026Updated last month
• revolver-ocelot-saa / GhidraX64Dbg

  View on GitHub
  Extract annoations from Ghidra into an X32/X64 dbg database
  ☆57Feb 24, 2021Updated 4 years ago
• o1mate / DLLProx

  View on GitHub
  Automatic DLL comment link generation and explaination of the DLL Proxying techniques
  ☆10Aug 19, 2021Updated 4 years ago
• ssp4rk / threatintel

  View on GitHub
  ☆11Mar 12, 2021Updated 4 years ago
• re-fox / documentation

  View on GitHub
  ☆13Nov 10, 2020Updated 5 years ago
• Leoid / Encoder

  View on GitHub
  Alphanumeric Encoder
  ☆25Oct 10, 2018Updated 7 years ago
• cbecks2 / edr-artifacts

  View on GitHub
  This repository is meant to catalog network and host artifacts associated with various EDR products "shell" and response functionalities.
  ☆92Aug 30, 2024Updated last year
• upils / redirect-lib

  View on GitHub
  Library of traffic redirectors
  ☆26Apr 7, 2020Updated 5 years ago
• fireeye / brocapi

  View on GitHub
  Bro PCAP Processing and Tagging API
  ☆28Nov 9, 2017Updated 8 years ago
• jonny-jhnson / Windows-API-To-Sysmon-Events

  View on GitHub
  A repository that maps API calls to Sysmon Event ID's.
  ☆121Nov 14, 2022Updated 3 years ago
• homjxi0e / PowerAvails

  View on GitHub
  PowerAvails is a unit of collection of Powershell modules that help you get done many things
  ☆118May 31, 2019Updated 6 years ago
• sumeshi / evtx2es

  View on GitHub
  A library for fast parse & import of Windows Eventlogs into Elasticsearch.
  ☆86Jun 23, 2025Updated 7 months ago
• jstnkndy / scripts

  View on GitHub
  Scripts that I've written that others may find useful
  ☆14Aug 17, 2022Updated 3 years ago
• Onapsis / Onapsis_CVE-2025-31324_Scanner_Tools

  View on GitHub
  ☆12Jun 6, 2025Updated 8 months ago
• antman1p / JXA_Proc_Tree

  View on GitHub
  A JXA script for enumerating running processes, printed out in a json, parent-child tree.
  ☆14Jan 28, 2022Updated 4 years ago
• NorthwaveSecurity / lilo-pulse-secure-decrypt

  View on GitHub
  LILO based Pulse Secure appliance disk image decryptor
  ☆13Mar 20, 2024Updated last year
• cudeso / misp-reporting

  View on GitHub
  A package to create HTML MISP reports, including volume of trending events and attributes, evens received from key organisations and targ…
  ☆11Aug 14, 2025Updated 6 months ago
• whb224117 / MobileApp-Pentest-Cheatsheet

  View on GitHub
  The Mobile App Pentest cheat sheet was created to provide concise collection of high value information on specific mobile application pen…
  ☆10Jun 23, 2016Updated 9 years ago
• rvrsh3ll / Sharp-Suite

  View on GitHub
  My musings with C#
  ☆28Dec 23, 2022Updated 3 years ago
• darrenmartyn / misc_utils

  View on GitHub
  misc scripts/utils that I've written that aren't deserving of own repos.
  ☆14Aug 18, 2021Updated 4 years ago
• AndyNovo / UDCTF22

  View on GitHub
  Public Repo for the source code of the UDCTF in 2022
  ☆12Nov 7, 2022Updated 3 years ago
• zMarch / suspect

  View on GitHub
  suspect is a simple bash triage tool
  ☆19Aug 30, 2018Updated 7 years ago
• forensicmatt / RustyLnk

  View on GitHub
  LNK to JSON
  ☆14Mar 7, 2019Updated 6 years ago
• koenrh / certstatus

  View on GitHub
  Obtain the (revocation) status of an X.509 certificate.
  ☆16Updated this week
• fboldewin / COM-Code-Helper

  View on GitHub
  Two IDAPython Scripts help you to reconstruct Microsoft COM (Component Object Model) Code
  ☆184Oct 5, 2020Updated 5 years ago
• 0xtf / testmynids.org

  View on GitHub
  A website and framework for testing NIDS detection
  ☆57Aug 29, 2021Updated 4 years ago
• RiccardoAncarani / bloodhound-playbook

  View on GitHub
  Reproducible and extensible BloodHound playbooks
  ☆44Jan 20, 2020Updated 6 years ago
• benyG / RProcDump

  View on GitHub
  Remote process dumping automation. Use it to dump Windows credentials remotely and extract clear text with Mimikatz offline
  ☆35Jan 3, 2020Updated 6 years ago
• Rurik / FileInfo

  View on GitHub
  Basic file metadata gathering script
  ☆21Apr 16, 2025Updated 9 months ago
• micrictor / spl-spt

  View on GitHub
  Zeek plugin to generate data on per-packet sizes and intervals
  ☆14Apr 21, 2020Updated 5 years ago
• johnbergbom / PeddleCheap

  View on GitHub
  Pcaps for PeddleCheap and implant communication + script for interpreting and decrypting pcaps.
  ☆17Nov 29, 2017Updated 8 years ago