Python script to decode common encoded PowerShell scripts
☆215Jun 13, 2018Updated 8 years ago
Alternatives and similar repositories for PyPowerShellXray
Users that are interested in PyPowerShellXray are comparing it to the libraries listed below. We may earn a commission when you buy through links labeled 'Ad' on this page.
Sorting:
- Query and report user logons relations from MS Windows Security Events☆242Aug 9, 2018Updated 8 years ago
- Force-Directed Graph Generator for Volatility Ouputs☆26Mar 3, 2019Updated 7 years ago
- Reconstruct process trees from event logs☆148Aug 12, 2020Updated 6 years ago
- A repo to hold some scripts pertaining WMI (Windows implementation of WBEM) forensics☆88Oct 6, 2017Updated 9 years ago
- PowerShell Obfuscation Detection Framework☆757Dec 1, 2023Updated 2 years ago
- Deploy on Railway without the complexity - Free Credits Offer • AdConnect your repo and Railway handles the rest with instant previews. Quickly provision container image services, databases, and storage volumes.
- Collection of PowerShell scripts☆450Dec 18, 2017Updated 8 years ago
- VirusTotal Intelligence Notification Puller☆27Jun 29, 2016Updated 10 years ago
- POC Highlighting Obfuscation Techniques used by FIN threat actors based on cmd.exe's replace functionality and cmd.exe/powershell.exe's s…☆109Jul 2, 2017Updated 9 years ago
- "Evolving AppCompat/AmCache data analysis beyond grep"☆216Sep 15, 2021Updated 5 years ago
- Windows registry samples☆24Nov 18, 2018Updated 7 years ago
- An open source framework for enterprise level automated analysis.☆392Jun 27, 2022Updated 4 years ago
- Malware Configuration And Payload Extraction☆763Nov 22, 2024Updated last year
- A Windows Event Processing Utility☆48Feb 21, 2018Updated 8 years ago
- A modern Python-3-based alternative to RegRipper☆220May 12, 2026Updated 5 months ago
- GPU virtual machines on DigitalOcean Gradient AI • AdGet to production fast with high-performance AMD and NVIDIA GPUs you can spin up in seconds. The definition of operational simplicity.
- Scripts and code referenced in CrowdStrike blog posts☆341Nov 13, 2019Updated 6 years ago
- Automated, Collection, and Enrichment Platform☆324Nov 14, 2019Updated 6 years ago
- ☆320Aug 14, 2020Updated 6 years ago
- Collect, Process, and Hunt with host based data from MacOS, Windows, and Linux☆519Oct 21, 2022Updated 4 years ago
- 16,432 Free Yara rules created by☆389Jun 1, 2019Updated 7 years ago
- Volatility Plugins☆22May 1, 2015Updated 11 years ago
- PowerForensics provides an all in one platform for live disk forensic analysis☆1,445Nov 16, 2023Updated 2 years ago
- Incident Response Forensic Framework☆607Nov 20, 2019Updated 6 years ago
- Codex Gigas malware DNA profiling search engine discovers malware patterns and characteristics assisting individuals who are attracted in…☆154Dec 20, 2019Updated 6 years ago
- Managed hosting for WordPress and PHP on Cloudways • AdManaged hosting for WordPress, Magento, Laravel, or PHP apps, on multiple cloud providers. Deploy in minutes on Cloudways by DigitalOcean.
- The Cold Disk Quick Response (CDQR) tool is a fast and easy to use forensic artifact parsing tool that works on disk images, mounted driv…☆347Jun 25, 2022Updated 4 years ago
- Autoruns plugin for the Volatility framework☆124Jul 18, 2019Updated 7 years ago
- Currently not updated for WMIEvent module...☆262Feb 23, 2016Updated 10 years ago
- Sources, configuration and how to detect evil things utilizing Microsoft Sysmon.☆946Dec 12, 2023Updated 2 years ago
- Shows command lines used by latest instances analyzed on Hybrid-Analysis☆43Sep 18, 2018Updated 8 years ago
- ☆350Mar 19, 2021Updated 5 years ago
- Parse evtx files and detect use of the DanderSpritz eventlogedit module☆150Dec 15, 2017Updated 8 years ago
- ☆52Sep 17, 2018Updated 8 years ago
- Registry to JSON. This Project is for learning purposes and is not maintained.☆12Dec 28, 2021Updated 4 years ago
- Deploy to Railway using AI coding agents - Free Credits Offer • AdUse Claude Code, Codex, OpenCode, and more. Autonomous software development now has the infrastructure to match with Railway.
- CimSweep is a suite of CIM/WMI-based tools that enable the ability to perform incident response and hunting operations remotely across al…☆657Aug 19, 2019Updated 7 years ago
- A Yara rule generator for finding related samples and hunting☆166Sep 11, 2022Updated 4 years ago
- Online hash checker for Virustotal and other services☆858Sep 22, 2026Updated last month
- Various snippets created during malware analysis☆466Oct 3, 2025Updated last year
- An informational repo about hunting for adversaries in your IT environment.☆1,899Nov 17, 2021Updated 4 years ago
- FCL (Fileless Command Lines) - Known command lines of fileless malicious executions☆478Apr 8, 2021Updated 5 years ago
- Yet another registry parser☆143Apr 15, 2022Updated 4 years ago