PowerDecode is a PowerShell-based tool that allows to deobfuscate PowerShell scripts obfuscated across multiple layers. The tool performs code dynamic analysis, extracting malware hosting URLs and checking http response.It can also detect if the malware attempts to inject shellcode into memory.
☆238Apr 28, 2024Updated 2 years ago
Alternatives and similar repositories for PowerDecode
Users that are interested in PowerDecode are comparing it to the libraries listed below. We may earn a commission when you buy through links labeled 'Ad' on this page.
Sorting:
- PowerShell script for deobfuscating encoded PowerShell scripts☆437Feb 4, 2021Updated 5 years ago
- Volatility 3 Plugins☆21Oct 3, 2022Updated 4 years ago
- A tool for de-obfuscating PowerShell scripts☆71Apr 24, 2019Updated 7 years ago
- EntraTrace is a defensive security research tool for tracking and identifying the behavior of offensive tooling targeting Microsoft Entra…☆122Updated this week
- Go fastcall analysis for ida decompiler☆49Jun 25, 2025Updated last year
- Managed Kubernetes at scale on DigitalOcean • AdDigitalOcean Kubernetes includes the control plane, bandwidth allowance, container registry, automatic updates, and more for free.
- A C2 framework inspired by anime, made in python.☆12Feb 8, 2026Updated 8 months ago
- Windows symbol tables for Volatility 3☆100Jul 11, 2024Updated 2 years ago
- A guide to using Azure Data Explorer and KQL for DFIR☆124May 16, 2022Updated 4 years ago
- Help deobfuscate VBScript☆18Jul 1, 2022Updated 4 years ago
- Enumeration & fingerprint tool☆24Updated this week
- PowerShell tools to help defenders hunt smarter, hunt harder.☆489Oct 29, 2025Updated 11 months ago
- Rapidly Search and Hunt through Windows Forensic Artefacts☆3,695Updated this week
- MS Graph Commands and Tools for Blue Teamers☆51Feb 4, 2026Updated 8 months ago
- ☆212May 10, 2026Updated 5 months ago
- 1-Click AI Models by DigitalOcean Gradient • AdDeploy popular AI models on DigitalOcean Gradient GPU virtual machines with just a single click. Zero configuration with optimized deployments.
- ☆20Oct 23, 2020Updated 5 years ago
- Artifact collection tool for *nix systems☆223Mar 20, 2024Updated 2 years ago
- ☆15Sep 26, 2023Updated 3 years ago
- ☆25Apr 22, 2025Updated last year
- Powershell script deobfuscation using AST in Python☆75Jul 7, 2026Updated 3 months ago
- Evtx Log (xml) Browser☆60Mar 12, 2023Updated 3 years ago
- Repository to publish sample use cases, templates, solutions, automations for Microsoft Defender Threat Intelligence (MDTI) product☆82Sep 9, 2024Updated 2 years ago
- Scripts and a short guide for using them to tier an Active Directory. Made for BSides Copenhagen 2024☆41Oct 20, 2025Updated 11 months ago
- A powershell parser for https://github.com/ufrisk/MemProcFS☆45May 12, 2021Updated 5 years ago
- GPUs on demand by Runpod - Special Offer Available • AdRun AI, ML, and HPC workloads on powerful cloud GPUs—without limits or wasted spend. Deploy GPUs in under a minute and pay by the second.
- A standalone SIGMA-based detection tool for EVTX, Auditd and Sysmon for Linux logs☆862Updated this week
- PowerShell script designed to help Incident Responders collect forensic evidence from local and remote Windows devices.☆115Aug 26, 2024Updated 2 years ago
- A repository hosting example goodware evtx logs containing sample software installation and basic user interaction☆93Sep 14, 2026Updated last month
- IDA plugin to deobfuscate emotet CFF☆18Apr 26, 2022Updated 4 years ago
- A curated list of KAPE-related resources☆194May 1, 2025Updated last year
- Powershell module that can be used by Blue Teams, Incident Responders and System Administrators to hunt persistences implanted in Windows…☆2,140Dec 11, 2024Updated last year
- APT-Hunter is Threat Hunting tool for windows event logs which made by purple team mindset to provide detect APT movements hidden in the …☆1,430Sep 20, 2026Updated 3 weeks ago
- A Fast (and safe) parser for the Windows XML Event Log (EVTX) format☆967Oct 7, 2026Updated last week
- ☆27Jul 23, 2024Updated 2 years ago
- GPU virtual machines on DigitalOcean Gradient AI • AdGet to production fast with high-performance AMD and NVIDIA GPUs you can spin up in seconds. The definition of operational simplicity.
- Hayabusa (隼) is a sigma-based threat hunting and fast forensics timeline generator for Windows event logs.☆3,402Updated this week
- A collector and derivation engine. It maps your environment, evaluates effective permissions and trust, and writes a complete attack grap…☆84Sep 15, 2026Updated last month
- NTFS file system specimens☆13May 21, 2026Updated 4 months ago
- Practical Windows Forensics Training☆787Feb 16, 2026Updated 8 months ago
- Defeating Anti-Debugging Techniques for Malware Analysis☆12Oct 1, 2022Updated 4 years ago
- ☆218Jul 8, 2026Updated 3 months ago
- Malware Samples that could be used for teaching students about malware analysis.☆64Apr 8, 2024Updated 2 years ago