Alternatives and similar repositories for malware-persistence

Users that are interested in malware-persistence are comparing it to the libraries listed below

• Neo23x0 / YARA-Performance-Guidelines
  A guide on how to write fast and memory friendly YARA rules
  ☆144Updated 3 months ago
• SentineLabs / SentinelLabs_RevCore_Tools
  The Windows Malware Analysis Reversing Core Tools
  ☆95Updated 4 years ago
• silence-is-best / c2db
  c2 traffic
  ☆188Updated 2 years ago
• pan-unit42 / tweets
  ☆130Updated last year
• StrangerealIntel / Orion
  A YARA rules repository continuously updated for monitoring the old and new threats from articles, incidents responses ...
  ☆139Updated last year
• strozfriedberg / cobaltstrike-config-extractor
  Cobalt Strike Beacon configuration extractor and parser.
  ☆153Updated 3 years ago
• jsecurity101 / TelemetrySource
  ☆247Updated last year
• netskopeoss / NetskopeThreatLabsIOCs
  ☆131Updated last week
• CERT-Polska / malduck
  Malduck is your ducky companion in malware analysis journeys
  ☆335Updated last month
• fr0gger / unprotect
  Unprotect is a python tool for parsing PE malware and extract evasion techniques.
  ☆114Updated 2 years ago
• CrowdStrike / SuperMem
  A python script developed to process Windows memory images based on triage type.
  ☆262Updated last year
• Neo23x0 / yaraQA
  YARA rule analyzer to improve rule quality and performance
  ☆101Updated last month
• mandiant / VM-Packages
  Chocolatey packages supporting the analysis environment projects FLARE-VM & Commando VM.
  ☆180Updated last week
• xorhex / mlget
  A golang CLI tool to download malware from a variety of sources.
  ☆146Updated last year
• c3rb3ru5d3d53c / mwcfg
  A Feature Rich Modular Malware Configuration Extraction Utility for MalDuck
  ☆128Updated last year
• JPCERTCC / jpcert-yara
  JPCERT/CC public YARA rules repository
  ☆106Updated 5 months ago
• CybercentreCanada / CCCS-Yara
  YARA rule metadata specification and validation utility / Spécification et validation pour les règles YARA
  ☆104Updated 3 weeks ago
• pan-unit42 / dotnetfile
  ☆104Updated last year
• DissectMalware / XLMMacroDeobfuscator
  Extract and Deobfuscate XLM macros (a.k.a Excel 4.0 Macros)
  ☆581Updated last year
• sbousseaden / Slides
  Misc Threat Hunting Resources
  ☆373Updated 2 years ago
• theflakes / reg_hunter
  Blueteam operational triage registry hunting/forensic tool.
  ☆147Updated 2 years ago
• claroty / arya
  Arya is a unique tool that produces pseudo-malicious files meant to trigger YARA rules. You can think of it like a reverse YARA.
  ☆248Updated 2 years ago
• ashemery / malware4edu
  Malware Samples that could be used for teaching students about malware analysis.
  ☆54Updated last year
• The-DFIR-Report / Yara-Rules
  ☆69Updated 3 months ago
• d4rk-d4nph3 / Ransomware-Reports
  This repo is a collection of Ransomware reports from vendors, researchers, etc.
  ☆118Updated 2 years ago
• splunk / melting-cobalt
  A Cobalt Strike Scanner that retrieves detected Team Server beacons into a JSON object
  ☆166Updated 2 years ago
• malpedia / signator-rules
  Collection of rules created using YARA-Signator over Malpedia
  ☆129Updated 6 months ago
• 100DaysofYARA / 2024
  Rules shared by the community from 100 Days of YARA 2024
  ☆85Updated 5 months ago
• albertzsigovits / malware-writeups
  Personal research and publication on malware families
  ☆138Updated 5 months ago
• sbousseaden / YaraHunts
  Random hunting ordiented yara rules
  ☆96Updated 2 years ago