JohnLaTwC / PyPowerShellXray

Related projects ⓘ

Alternatives and complementary repositories for PyPowerShellXray

• JavelinNetworks / IR-Tools
  IR-Tools - PowerShell tools for IR
  ☆128Updated 7 years ago
• giMini / NOAH
  PowerShell No Agent Hunting
  ☆108Updated 6 years ago
• williballenthin / process-forest
  Reconstruct process trees from event logs
  ☆146Updated 4 years ago
• SparkITSolutions / phoenix
  Cuckoo Sandbox is an automated dynamic malware analysis system
  ☆106Updated 4 years ago
• mkorman90 / VolatilityBot
  VolatilityBot – An automated memory analyzer for malware samples and memory dumps
  ☆263Updated 3 years ago
• beahunt3r / Windows-Hunting
  ☆347Updated 3 years ago
• MinervaLabsResearch / Mystique
  Mystique may be used to discover infection markers that can be used to vaccinate endpoints against malware. It receives as input a malici…
  ☆80Updated 7 years ago
• mandiant / Volatility-Plugins
  ☆82Updated 8 years ago
• gleeda / memtriage
  Allows you to quickly query a Windows machine for RAM artifacts
  ☆218Updated 4 years ago
• mandiant / ShimCacheParser
  ☆273Updated last year
• matonis / page_brute
  Page File analysis tools.
  ☆124Updated 8 years ago
• tehsyntx / loffice
  Lazy Office Analyzer
  ☆119Updated 7 years ago
• Tigzy / malware-repo
  Malware Repository Framework
  ☆100Updated 6 years ago
• MHaggis / hunt-detect-prevent
  Lists of sources and utilities utilized to hunt, detect and prevent evildoers.
  ☆162Updated 5 years ago
• veramine / Detections
  ☆108Updated 7 years ago
• tylabs / qs_old
  Command line tool for scanning streams within office documents plus xor db attack
  ☆126Updated last year
• DBHeise / VM_Setup
  A collection of scripts to initialize a windows VM to run all the malwares!
  ☆105Updated 4 years ago
• airbus-cert / regrippy
  A modern Python-3-based alternative to RegRipper
  ☆187Updated 2 weeks ago
• d00rt / emotet_research
  ☆134Updated 5 years ago
• 504ensicsLabs / DAMM
  Differential Analysis of Malware in Memory
  ☆209Updated 7 years ago
• mgreen27 / Invoke-LiveResponse
  Invoke-LiveResponse
  ☆145Updated 2 years ago
• Invoke-IR / ACE
  Automated, Collection, and Enrichment Platform
  ☆322Updated 5 years ago
• mbevilacqua / appcompatprocessor
  "Evolving AppCompat/AmCache data analysis beyond grep"
  ☆197Updated 3 years ago
• keydet89 / Tools
  Tools from WFA 4/e, timeline tools, etc.
  ☆132Updated 8 months ago
• Infocyte / PSHunt
  Powershell Threat Hunting Module
  ☆279Updated 8 years ago
• OMENScan / AChoir
  Windows Live Artifacts Acquisition Script
  ☆183Updated 2 years ago
• THIBER-ORG / userline
  Query and report user logons relations from MS Windows Security Events
  ☆240Updated 6 years ago