Alternatives and similar repositories for detect-lkm-rootkit-cheatsheet

Users that are interested in detect-lkm-rootkit-cheatsheet are comparing it to the libraries listed below

• ArtemBaranov / WindowsRootkitsGuide
  ☆71Updated 10 months ago
• MatheuZSecurity / Rootkit
  Collection of codes focused on Linux rootkits
  ☆188Updated last month
• eric-conrad / c2-talk
  ☆37Updated last year
• eversinc33 / TriageMCP
  Vibe Malware Triage - MCP server for static PE analysis.
  ☆73Updated last week
• ashemery / Anti-Forensics
  A Repository to Track Anti-Forensic Techniques
  ☆117Updated 2 years ago
• LambdaMamba / LenaMalwareAnalysis
  Lena's scripts/code/resources for malware analysis
  ☆26Updated last year
• MatheuZSecurity / Imperius
  Make an Linux Kernel rootkit visible again.
  ☆61Updated 9 months ago
• tstromberg / sunlight
  Linux #rootkit and #malware revealer
  ☆28Updated last year
• volexity / GoResolver
  GoResolver is a Go analysis tool using both Go symbol extraction and Control Flow Graph (CFG) similarity to identify and resolve the func…
  ☆75Updated 3 months ago
• grahamhelton / USP
  Establishes persistence on a Linux system by creating a udev rule that triggers the execution of a specified payload (binary or script)
  ☆145Updated last year
• BlackSnufkin / CheckPlz
  Scan files for potential threats while leveraging AMSI (Antimalware Scan Interface) and Windows Defender. By isolating malicious content.
  ☆33Updated 11 months ago
• LOLESXi-Project / LOLESXi
  LOLESXi is a curated compilation of binaries/scripts available in VMware ESXi that are were used to by adversaries in their intrusions. T…
  ☆139Updated 2 weeks ago
• outflanknl / edr-internals
  Tools for analyzing EDR agents
  ☆272Updated last year
• cbecks2 / edr-artifacts
  This repository is meant to catalog network and host artifacts associated with various EDR products "shell" and response functionalities.
  ☆91Updated last year
• SafeBreach-Labs / DoubleDrive
  A fully-undetectable ransomware that utilizes OneDrive & Google Drive to encrypt target local files
  ☆127Updated last year
• mephistolist / tito
  In-Memory Rootkit For Linux and BSD
  ☆86Updated 3 months ago
• reecdeep / hollowise
  Hollowise is a tool that implements process hollowing and PPID (Parent Process ID) spoofing techniques for masking a legitimate analysis …
  ☆39Updated 9 months ago
• CICADA8-Research / MyMSIAnalyzer
  Analyse MSI files for vulnerabilities
  ☆138Updated last year
• sensepost / mydumbedr
  ☆120Updated last year
• SafeBreach-Labs / wd-pretender
  ☆132Updated 2 years ago
• FuzzySecurity / BHUSA-2023
  ☆105Updated last year
• jaredcatkinson / MalwareMorphology
  ☆83Updated last year
• hasherezade / flareon2024
  ☆39Updated 11 months ago
• S3N4T0R-0X0 / APT28-Adversary-Simulation
  This is a simulation of attack by Fancy Bear group (APT28) targeting high-ranking government officials Western Asia and Eastern Europe
  ☆37Updated last year
• ExaTrack / Kdrill
  Python tool to check rootkits in Windows kernel
  ☆203Updated 3 months ago
• itaymigdal / malware-analysis-writeups
  Some of my Malware Analysis writeups
  ☆48Updated 2 months ago
• nikhilh-20 / ELFEN
  ELFEN: Automated Linux Malware Analysis Sandbox
  ☆129Updated 3 months ago
• dodo-sec / Malware-Analysis
  ☆139Updated 2 years ago
• x86byte / Stuxnet-Rootkit
  Stuxnet extracted binaries by reversing & Stuxnet Rootkit Analysis
  ☆75Updated last year
• moval0x1 / NoDelete
  NoDelete is a tool that assists in malware analysis by locking a folder where malware drops files before deleting them.
  ☆48Updated 2 weeks ago