Alternatives and similar repositories for Kdrill:

Users that are interested in Kdrill are comparing it to the libraries listed below

• forensicxlab / VISION-ProcMon
  A ProcessMonitor visualization application written in rust.
  ☆178Updated last year
• outflanknl / edr-internals
  Tools for analyzing EDR agents
  ☆221Updated 9 months ago
• jsecurity101 / JonMon
  ☆216Updated last month
• struppigel / hedgehog-tools
  ☆111Updated last month
• floesen / EventLogCrasher
  ☆186Updated last year
• Unprotect-Project / Unprotect_Submission
  Unprotect is a collaborative platform dedicated to uncovering and documenting malware evasion techniques. We invite you to join us in thi…
  ☆156Updated last month
• LOLESXi-Project / LOLESXi
  LOLESXi is a curated compilation of binaries/scripts available in VMware ESXi that are were used to by adversaries in their intrusions. T…
  ☆121Updated last month
• dobin / RedEdr
  Collect Windows telemetry for Maldev
  ☆316Updated last month
• RussianPanda95 / Yara-Rules
  Repository of Yara Rules
  ☆103Updated last month
• jsecurity101 / ETWInspector
  ☆155Updated 10 months ago
• jstrosch / sclauncher
  A small program written in C that is designed to load 32/64-bit shellcode and allow for execution or debugging. Can also output PE files …
  ☆139Updated 8 months ago
• deepinstinct / ContainYourself
  A PoC of the ContainYourself research presented in DEFCON 31, which abuses the Windows containers framework to bypass EDRs.
  ☆308Updated last year
• ArtemBaranov / WindowsRootkitsGuide
  ☆64Updated last month
• jsecurity101 / TelemetrySource
  ☆236Updated 10 months ago
• RussianPanda95 / Configuration_extractors
  Configuration Extractors for Malware
  ☆92Updated last month
• reecdeep / segugio
  Segugio allows the execution and tracking of critical steps in the malware detonation process, from clicking on the first stage to extrac…
  ☆147Updated 6 months ago
• dobin / avred
  Analyse your malware to surgically obfuscate it
  ☆454Updated 3 weeks ago
• Helixo32 / CrimsonEDR
  Simulate the behavior of AV/EDR for malware development training.
  ☆514Updated last year
• fin3ss3g0d / StoneKeeper
  StoneKeeper C2, an experimental EDR evasion framework for research purposes
  ☆194Updated 2 months ago
• An0nUD4Y / AV-EDR-Lab-Environment-Setup
  AV/EDR Lab environment setup references to help in Malware development
  ☆369Updated last month
• dodo-sec / Malware-Analysis
  ☆133Updated last year
• patrickmatula / Windows-Internals-Learning-Resources
  ☆97Updated 3 months ago
• kleiton0x00 / Proxy-DLL-Loads
  A proof of concept demonstrating the DLL-load proxying using undocumented Syscalls.
  ☆335Updated last month
• mgeeky / msidump
  MSI Dump - a tool that analyzes malicious MSI installation packages, extracts files, streams, binary data and incorporates YARA scanner.
  ☆205Updated last year
• knight0x07 / OneNoteAnalyzer
  A C# based tool for analysing malicious OneNote documents
  ☆111Updated last year
• Ahmed-AL-Maghraby / Windows-Registry-Analysis-Cheat-Sheet
  ☆158Updated last year
• rad9800 / FileRenameJunctionsEDRDisable
  ☆149Updated 3 months ago
• OWNsecurity / GWForensic
  DFIR project to collect and analyze events in Google Workspace
  ☆12Updated 11 months ago
• nasbench / Misc-Research
  A collection of tools, scripts and personal research
  ☆127Updated 8 months ago
• SafeBreach-Labs / DoubleDrive
  A fully-undetectable ransomware that utilizes OneDrive & Google Drive to encrypt target local files
  ☆123Updated 9 months ago