Alternatives and similar repositories for malware-persistence

Users that are interested in malware-persistence are comparing it to the libraries listed below

• Neo23x0 / YARA-Performance-Guidelines
  A guide on how to write fast and memory friendly YARA rules
  ☆162Updated 11 months ago
• SentineLabs / SentinelLabs_RevCore_Tools
  The Windows Malware Analysis Reversing Core Tools
  ☆97Updated 5 years ago
• StrangerealIntel / Orion
  A YARA rules repository continuously updated for monitoring the old and new threats from articles, incidents responses ...
  ☆141Updated 2 years ago
• CERT-Polska / malduck
  Malduck is your ducky companion in malware analysis journeys
  ☆348Updated 6 months ago
• Neo23x0 / yaraQA
  YARA rule analyzer to improve rule quality and performance
  ☆108Updated 9 months ago
• silence-is-best / c2db
  c2 traffic
  ☆192Updated 2 years ago
• ashemery / malware4edu
  Malware Samples that could be used for teaching students about malware analysis.
  ☆63Updated last year
• CybercentreCanada / CCCS-Yara
  YARA rule metadata specification and validation utility / Spécification et validation pour les règles YARA
  ☆114Updated this week
• d4rk-d4nph3 / Ransomware-Reports
  This repo is a collection of Ransomware reports from vendors, researchers, etc.
  ☆120Updated 3 years ago
• JPCERTCC / jpcert-yara
  JPCERT/CC public YARA rules repository
  ☆110Updated last month
• c3rb3ru5d3d53c / mwcfg
  A Feature Rich Modular Malware Configuration Extraction Utility for MalDuck
  ☆130Updated 2 years ago
• pan-unit42 / tweets
  ☆131Updated last year
• xorhex / mlget
  A golang CLI tool to download malware from a variety of sources.
  ☆151Updated 6 months ago
• jonny-jhnson / TelemetrySource
  ☆258Updated last year
• strozfriedberg / cobaltstrike-config-extractor
  Cobalt Strike Beacon configuration extractor and parser.
  ☆157Updated 2 months ago
• fr0gger / unprotect
  Unprotect is a python tool for parsing PE malware and extract evasion techniques.
  ☆120Updated 2 years ago
• claroty / arya
  Arya is a unique tool that produces pseudo-malicious files meant to trigger YARA rules. You can think of it like a reverse YARA.
  ☆259Updated 3 years ago
• fxb-cocacoding / yara-signator
  Automatic YARA rule generation for Malpedia
  ☆165Updated 3 years ago
• netskopeoss / NetskopeThreatLabsIOCs
  ☆151Updated 2 months ago
• hpthreatresearch / tools
  Scripts and tools accompanying HP Threat Research blog posts and reports.
  ☆50Updated last year
• splunk / melting-cobalt
  A Cobalt Strike Scanner that retrieves detected Team Server beacons into a JSON object
  ☆170Updated 3 years ago
• pan-unit42 / dotnetfile
  ☆111Updated 4 months ago
• forensicxlab / VISION-ProcMon
  A ProcessMonitor visualization application written in rust.
  ☆183Updated 2 years ago
• CrowdStrike / SuperMem
  A python script developed to process Windows memory images based on triage type.
  ☆265Updated 2 years ago
• 0xc1r3ng / Malware-Sandboxes-Malware-Source
  Malware Sandboxes & Malware Source
  ☆106Updated 8 years ago
• gtworek / VolatileDataCollector
  ☆212Updated last month
• 3CORESec / MAL-CL
  MAL-CL (Malicious Command-Line)
  ☆323Updated 3 years ago
• theflakes / reg_hunter
  Blueteam operational triage registry hunting/forensic tool.
  ☆150Updated 4 months ago
• ion-storm / sysmon-edr
  Sysmon EDR POC Build within Powershell to prove ability.
  ☆226Updated 4 years ago
• Insikt-Group / Research
  Research indicators and detection rules
  ☆67Updated 2 years ago