Alternatives and similar repositories for malware-persistence

Users that are interested in malware-persistence are comparing it to the libraries listed below

• SentineLabs / SentinelLabs_RevCore_Tools
  The Windows Malware Analysis Reversing Core Tools
  ☆96Updated 4 years ago
• Neo23x0 / YARA-Performance-Guidelines
  A guide on how to write fast and memory friendly YARA rules
  ☆153Updated 8 months ago
• StrangerealIntel / Orion
  A YARA rules repository continuously updated for monitoring the old and new threats from articles, incidents responses ...
  ☆140Updated last year
• d4rk-d4nph3 / Ransomware-Reports
  This repo is a collection of Ransomware reports from vendors, researchers, etc.
  ☆119Updated 3 years ago
• Neo23x0 / yaraQA
  YARA rule analyzer to improve rule quality and performance
  ☆104Updated 6 months ago
• JPCERTCC / jpcert-yara
  JPCERT/CC public YARA rules repository
  ☆110Updated 10 months ago
• fr0gger / unprotect
  Unprotect is a python tool for parsing PE malware and extract evasion techniques.
  ☆118Updated 2 years ago
• ashemery / malware4edu
  Malware Samples that could be used for teaching students about malware analysis.
  ☆62Updated last year
• pan-unit42 / tweets
  ☆131Updated last year
• CERT-Polska / malduck
  Malduck is your ducky companion in malware analysis journeys
  ☆346Updated 4 months ago
• claroty / arya
  Arya is a unique tool that produces pseudo-malicious files meant to trigger YARA rules. You can think of it like a reverse YARA.
  ☆259Updated 2 years ago
• 0xc1r3ng / Malware-Sandboxes-Malware-Source
  Malware Sandboxes & Malware Source
  ☆101Updated 8 years ago
• silence-is-best / c2db
  c2 traffic
  ☆191Updated 2 years ago
• jonny-jhnson / TelemetrySource
  ☆254Updated last year
• CybercentreCanada / CCCS-Yara
  YARA rule metadata specification and validation utility / Spécification et validation pour les règles YARA
  ☆107Updated 5 months ago
• c3rb3ru5d3d53c / mwcfg
  A Feature Rich Modular Malware Configuration Extraction Utility for MalDuck
  ☆130Updated last year
• fxb-cocacoding / yara-signator
  Automatic YARA rule generation for Malpedia
  ☆162Updated 3 years ago
• CrowdStrike / SuperMem
  A python script developed to process Windows memory images based on triage type.
  ☆265Updated last year
• hpthreatresearch / tools
  Scripts and tools accompanying HP Threat Research blog posts and reports.
  ☆50Updated last year
• netskopeoss / NetskopeThreatLabsIOCs
  ☆145Updated this week
• malpedia / signator-rules
  Collection of rules created using YARA-Signator over Malpedia
  ☆140Updated 11 months ago
• rj-chap / CFWorkshop
  Understanding and analyzing carrier files workshop repo
  ☆51Updated 5 years ago
• edygert / runsc
  runsc loads 32/64 bit shellcode (depending on how runsc is compiled) in a way that makes it easy to load in a debugger. This code is base…
  ☆38Updated 2 years ago
• monnappa22 / HollowFind
  Hollowfind is a Volatility plugin to detect different types of process hollowing techniques used in the wild to bypass, confuse, deflect …
  ☆141Updated 3 years ago
• forensicxlab / VISION-ProcMon
  A ProcessMonitor visualization application written in rust.
  ☆184Updated 2 years ago
• 100DaysofYARA / 2024
  Rules shared by the community from 100 Days of YARA 2024
  ☆86Updated 9 months ago
• MAECProject / schemas
  MAEC Schemas and Schema Development
  ☆88Updated 5 years ago
• MITRECND / malchive
  Various capabilities for static malware analysis.
  ☆79Updated last year
• theflakes / reg_hunter
  Blueteam operational triage registry hunting/forensic tool.
  ☆150Updated last month
• splunk / melting-cobalt
  A Cobalt Strike Scanner that retrieves detected Team Server beacons into a JSON object
  ☆170Updated 3 years ago