Alternatives and similar repositories for etw-scan

Users that are interested in etw-scan are comparing it to the libraries listed below

• herosi / triage-collector
  ☆22Updated 8 months ago
• bartblaze / DotNet-MetaData
  Identifies metadata of .NET binary files.
  ☆21Updated last year
• tstromberg / sunlight
  Linux #rootkit and #malware revealer
  ☆26Updated 10 months ago
• X-Junior / Malware-IDAPython-Scripts
  ☆22Updated last year
• ACE-Responder / rpcfirewall-extended-telemetry
  ☆14Updated last year
• reecdeep / hollowise
  Hollowise is a tool that implements process hollowing and PPID (Parent Process ID) spoofing techniques for masking a legitimate analysis …
  ☆36Updated 4 months ago
• woanware / etw-event-dumper
  ☆33Updated 3 years ago
• JPCERTCC / Lazarus-research
  Lazarus analysis tools and research report
  ☆56Updated last year
• airbus-cert / minusone
  Powershell Linter
  ☆62Updated this week
• GDATAAdvancedAnalytics / winreg-tasks
  ☆19Updated 2 years ago
• securepeacock / presentations
  Slides and materials from conference presentations
  ☆9Updated last year
• jonny-jhnson / JonMon-Lite
  ☆39Updated 3 weeks ago
• elceef / yara-rulz
  Collection of generic YARA rules
  ☆16Updated last year
• hasherezade / pesieve-go
  Golang bindings for PE-sieve
  ☆43Updated last year
• n1ght-w0lf / pe-unmapper
  A small tool to unmap PE memory dumps.
  ☆11Updated last year
• Foolish1337 / kernel-programming
  Progress of learning kernel development
  ☆14Updated 2 years ago
• FarghlyMal / Config-Extractors
  ☆27Updated 7 months ago
• dr4k0nia / yara-rules
  A collection of my yara rules
  ☆34Updated last year
• naksyn / talks
  Repo containing my public talks
  ☆23Updated 2 years ago
• rad9800 / RansomFS
  ☆31Updated 3 months ago
• olafhartong / PockETWatcher
  a tiny program to consume from ETW providers for research
  ☆49Updated 5 months ago
• NextronSystems / gimphash
  Imphash-like calculation on Golang binaries
  ☆49Updated 2 years ago
• stairwell-inc / cobalt-strike-stager-parser
  ☆34Updated 2 years ago
• JPCERTCC / SurfaceAnalysis-on-Cloud
  Surface Analysis System on Cloud
  ☆19Updated last year
• sisoma2 / malware_analysis
  Scripts, Yara rules and other files developed during malware investigations
  ☆25Updated 2 years ago
• BlackSnufkin / CheckPlz
  Scan files for potential threats while leveraging AMSI (Antimalware Scan Interface) and Windows Defender. By isolating malicious content.
  ☆19Updated 5 months ago
• MikeHorn-git / WAFS
  Hardened your Windows OS against forensics analysis
  ☆21Updated 7 months ago
• embee-research / Yara-detection-rules
  Yara Rules for Modern Malware
  ☆77Updated last year
• kacos2000 / Prefetch-Browser
  Browse Windows Prefetch versions: 17,23,26,30v1/2,31 & some of SuperFetch .7db/.db's
  ☆62Updated 6 months ago
• jstrosch / subparse
  Modular malware analysis artifact collection and correlation framework
  ☆53Updated last year