Alternatives and similar repositories for LnkParse3

Users that are interested in LnkParse3 are comparing it to the libraries listed below

• knez / defender-dump
  Dump quarantined files from Windows Defender
  ☆74Updated 3 years ago
• forensicxlab / VISION-ProcMon
  A ProcessMonitor visualization application written in rust.
  ☆184Updated 2 years ago
• pan-unit42 / dotnetfile
  ☆111Updated 2 months ago
• RussianPanda95 / Yara-Rules
  Repository of Yara Rules
  ☆130Updated last month
• Neo23x0 / yaraQA
  YARA rule analyzer to improve rule quality and performance
  ☆107Updated 7 months ago
• malpedia / signator-rules
  Collection of rules created using YARA-Signator over Malpedia
  ☆141Updated last year
• jonny-jhnson / TelemetrySource
  ☆256Updated last year
• knight0x07 / OneNoteAnalyzer
  A C# based tool for analysing malicious OneNote documents
  ☆118Updated 2 years ago
• Malandrone / PowerDecode
  PowerDecode is a PowerShell-based tool that allows to deobfuscate PowerShell scripts obfuscated across multiple layers. The tool performs…
  ☆226Updated last year
• gtworek / VolatileDataCollector
  ☆205Updated 3 weeks ago
• edygert / runsc
  runsc loads 32/64 bit shellcode (depending on how runsc is compiled) in a way that makes it easy to load in a debugger. This code is base…
  ☆38Updated 2 years ago
• thewhiteninja / deobshell
  Powershell script deobfuscation using AST in Python
  ☆72Updated 2 months ago
• kacos2000 / MFT_Browser
  $MFT directory tree reconstruction & FILE record info
  ☆321Updated last year
• mgeeky / msidump
  MSI Dump - a tool that analyzes malicious MSI installation packages, extracts files, streams, binary data and incorporates YARA scanner.
  ☆223Updated 2 years ago
• 0x534a / dynmx
  Signature-based detection of malware features based on Windows API call sequences. It's like YARA for sandbox API traces!
  ☆82Updated 2 years ago
• ashemery / malware4edu
  Malware Samples that could be used for teaching students about malware analysis.
  ☆63Updated last year
• Neo23x0 / YARA-Performance-Guidelines
  A guide on how to write fast and memory friendly YARA rules
  ☆157Updated 9 months ago
• jonny-jhnson / JonMon
  ☆245Updated 5 months ago
• LETHAL-FORENSICS / Collect-MemoryDump
  Collect-MemoryDump - Automated Creation of Windows Memory Snapshots for DFIR
  ☆252Updated last month
• Karneades / malware-persistence
  Collection of malware persistence and hunting information. Be a persistent persistence hunter!
  ☆182Updated 2 months ago
• elastic / labs-releases
  Elastic Security Labs releases
  ☆81Updated last week
• jstrosch / sclauncher
  A small program written in C that is designed to load 32/64-bit shellcode and allow for execution or debugging. Can also output PE files …
  ☆167Updated last year
• DissectMalware / pyOneNote
  A python library to parse OneNote (.one) files
  ☆140Updated last year
• JPCERTCC / Windows-Symbol-Tables
  Windows symbol tables for Volatility 3
  ☆91Updated last year
• GDATAAdvancedAnalytics / winreg-tasks
  ☆20Updated 3 years ago
• RussianPanda95 / Configuration_extractors
  Configuration Extractors for Malware
  ☆121Updated 7 months ago
• mandiant / VM-Packages
  Chocolatey packages supporting the analysis environment projects FLARE-VM & Commando VM.
  ☆205Updated 2 weeks ago
• 100DaysofYARA / 2024
  Rules shared by the community from 100 Days of YARA 2024
  ☆86Updated 11 months ago
• manyfacedllama / amsi-tracer
  Leverage AMSI (Antimalware Scan Interface) technology to aid your analysis. This tool saves all buffers (scripts, .NET assemblies, etc) …
  ☆112Updated 4 years ago
• mandiant / gootloader
  Collection of scripts used to deobfuscate GOOTLOADER malware samples.
  ☆73Updated 3 weeks ago