Alternatives and similar repositories for malware-persistence:

Users that are interested in malware-persistence are comparing it to the libraries listed below

• silence-is-best / c2db
  c2 traffic
  ☆188Updated 2 years ago
• CERT-Polska / malduck
  Malduck is your ducky companion in malware analysis journeys
  ☆330Updated this week
• Neo23x0 / YARA-Performance-Guidelines
  A guide on how to write fast and memory friendly YARA rules
  ☆142Updated 2 months ago
• pan-unit42 / tweets
  ☆130Updated last year
• StrangerealIntel / Orion
  A YARA rules repository continuously updated for monitoring the old and new threats from articles, incidents responses ...
  ☆139Updated last year
• Neo23x0 / yaraQA
  YARA rule analyzer to improve rule quality and performance
  ☆99Updated 3 weeks ago
• jsecurity101 / TelemetrySource
  ☆246Updated 11 months ago
• SentineLabs / SentinelLabs_RevCore_Tools
  The Windows Malware Analysis Reversing Core Tools
  ☆95Updated 4 years ago
• JPCERTCC / jpcert-yara
  JPCERT/CC public YARA rules repository
  ☆106Updated 4 months ago
• fr0gger / unprotect
  Unprotect is a python tool for parsing PE malware and extract evasion techniques.
  ☆115Updated last year
• netskopeoss / NetskopeThreatLabsIOCs
  ☆129Updated last month
• strozfriedberg / cobaltstrike-config-extractor
  Cobalt Strike Beacon configuration extractor and parser.
  ☆152Updated 3 years ago
• forensicxlab / VISION-ProcMon
  A ProcessMonitor visualization application written in rust.
  ☆178Updated last year
• xorhex / mlget
  A golang CLI tool to download malware from a variety of sources.
  ☆143Updated last year
• d4rk-d4nph3 / Ransomware-Reports
  This repo is a collection of Ransomware reports from vendors, researchers, etc.
  ☆116Updated 2 years ago
• malpedia / signator-rules
  Collection of rules created using YARA-Signator over Malpedia
  ☆128Updated 5 months ago
• c3rb3ru5d3d53c / mwcfg
  A Feature Rich Modular Malware Configuration Extraction Utility for MalDuck
  ☆128Updated last year
• CrowdStrike / SuperMem
  A python script developed to process Windows memory images based on triage type.
  ☆262Updated last year
• gtworek / VolatileDataCollector
  ☆201Updated 6 months ago
• LETHAL-FORENSICS / Collect-MemoryDump
  Collect-MemoryDump - Automated Creation of Windows Memory Snapshots for DFIR
  ☆237Updated last month
• fxb-cocacoding / yara-signator
  Automatic YARA rule generation for Malpedia
  ☆160Updated 2 years ago
• CybercentreCanada / CCCS-Yara
  YARA rule metadata specification and validation utility / Spécification et validation pour les règles YARA
  ☆104Updated last month
• mandiant / VM-Packages
  Chocolatey packages supporting the analysis environment projects FLARE-VM & Commando VM.
  ☆175Updated last week
• AndrewRathbun / VanillaWindowsReference
  A repo that contains recursive directory listings (using PowerShell) of a vanilla (clean) install of every Windows OS version to compare …
  ☆160Updated 5 months ago
• sbousseaden / Slides
  Misc Threat Hunting Resources
  ☆374Updated 2 years ago
• CAPESandbox / community
  Community modules for CAPE Sandbox
  ☆96Updated 3 weeks ago
• sbousseaden / YaraHunts
  Random hunting ordiented yara rules
  ☆96Updated 2 years ago
• The-DFIR-Report / Yara-Rules
  ☆68Updated 2 months ago
• splunk / melting-cobalt
  A Cobalt Strike Scanner that retrieves detected Team Server beacons into a JSON object
  ☆165Updated 2 years ago
• DissectMalware / XLMMacroDeobfuscator
  Extract and Deobfuscate XLM macros (a.k.a Excel 4.0 Macros)
  ☆578Updated last year