Alternatives and similar repositories for malware-persistence

Users that are interested in malware-persistence are comparing it to the libraries listed below

• Neo23x0 / YARA-Performance-Guidelines
  A guide on how to write fast and memory friendly YARA rules
  ☆151Updated 7 months ago
• StrangerealIntel / Orion
  A YARA rules repository continuously updated for monitoring the old and new threats from articles, incidents responses ...
  ☆138Updated last year
• SentineLabs / SentinelLabs_RevCore_Tools
  The Windows Malware Analysis Reversing Core Tools
  ☆96Updated 4 years ago
• JPCERTCC / jpcert-yara
  JPCERT/CC public YARA rules repository
  ☆110Updated 9 months ago
• ashemery / malware4edu
  Malware Samples that could be used for teaching students about malware analysis.
  ☆58Updated last year
• c3rb3ru5d3d53c / mwcfg
  A Feature Rich Modular Malware Configuration Extraction Utility for MalDuck
  ☆132Updated last year
• d4rk-d4nph3 / Ransomware-Reports
  This repo is a collection of Ransomware reports from vendors, researchers, etc.
  ☆119Updated 3 years ago
• pan-unit42 / tweets
  ☆130Updated last year
• fr0gger / unprotect
  Unprotect is a python tool for parsing PE malware and extract evasion techniques.
  ☆119Updated 2 years ago
• Neo23x0 / yaraQA
  YARA rule analyzer to improve rule quality and performance
  ☆103Updated 5 months ago
• silence-is-best / c2db
  c2 traffic
  ☆190Updated 2 years ago
• jonny-jhnson / TelemetrySource
  ☆253Updated last year
• CERT-Polska / malduck
  Malduck is your ducky companion in malware analysis journeys
  ☆342Updated 2 months ago
• claroty / arya
  Arya is a unique tool that produces pseudo-malicious files meant to trigger YARA rules. You can think of it like a reverse YARA.
  ☆257Updated 2 years ago
• CybercentreCanada / CCCS-Yara
  YARA rule metadata specification and validation utility / Spécification et validation pour les règles YARA
  ☆106Updated 4 months ago
• hpthreatresearch / tools
  Scripts and tools accompanying HP Threat Research blog posts and reports.
  ☆50Updated last year
• xorhex / mlget
  A golang CLI tool to download malware from a variety of sources.
  ☆150Updated 2 months ago
• 0xc1r3ng / Malware-Sandboxes-Malware-Source
  Malware Sandboxes & Malware Source
  ☆100Updated 8 years ago
• CrowdStrike / SuperMem
  A python script developed to process Windows memory images based on triage type.
  ☆265Updated last year
• strozfriedberg / cobaltstrike-config-extractor
  Cobalt Strike Beacon configuration extractor and parser.
  ☆156Updated 4 years ago
• mandiant / gootloader
  Collection of scripts used to deobfuscate GOOTLOADER malware samples.
  ☆63Updated 8 months ago
• edygert / runsc
  runsc loads 32/64 bit shellcode (depending on how runsc is compiled) in a way that makes it easy to load in a debugger. This code is base…
  ☆37Updated 2 years ago
• Insikt-Group / Research
  Research indicators and detection rules
  ☆66Updated last year
• forensicxlab / VISION-ProcMon
  A ProcessMonitor visualization application written in rust.
  ☆183Updated 2 years ago
• theflakes / reg_hunter
  Blueteam operational triage registry hunting/forensic tool.
  ☆149Updated last week
• fireeye / BitsParser
  ☆149Updated last year
• rj-chap / CFWorkshop
  Understanding and analyzing carrier files workshop repo
  ☆51Updated 5 years ago
• mandiant / VM-Packages
  Chocolatey packages supporting the analysis environment projects FLARE-VM & Commando VM.
  ☆195Updated this week
• gtworek / VolatileDataCollector
  ☆204Updated 10 months ago
• 100DaysofYARA / 2024
  Rules shared by the community from 100 Days of YARA 2024
  ☆85Updated 8 months ago