Alternatives and similar repositories for cyber-chef-recipes

Users that are interested in cyber-chef-recipes are comparing it to the libraries listed below

• Neo23x0 / atomic-threat-coverage

  View on GitHub
  Knowledge base of analytics designed to cover threats based on MITRE's ATT&CK.
  ☆23Dec 13, 2018Updated 7 years ago
• Neo23x0 / YARA-rules

  View on GitHub
  Some YARA rules i will add from time to time
  ☆12May 31, 2019Updated 6 years ago
• EricZimmerman / USBDevices

  View on GitHub
  Get USB Devices from Registry hives
  ☆22Nov 15, 2021Updated 4 years ago
• Neo23x0 / ti-falsepositives

  View on GitHub
  A collection of typical false positive indicators
  ☆56Dec 5, 2020Updated 5 years ago
• humpalum / vscode-sigma

  View on GitHub
  ☆17Oct 13, 2025Updated 4 months ago
• Neo23x0 / awesome-yara

  View on GitHub
  A curated list of awesome YARA rules, tools, and people.
  ☆33Oct 26, 2023Updated 2 years ago
• EricZimmerman / ExtensionBlocks

  View on GitHub
  Extension blocks as found in ShellBags and other places in the Registry
  ☆25Jan 7, 2025Updated last year
• Neo23x0 / evt2sigma

  View on GitHub
  Log Entry to Sigma Rule Converter
  ☆107Mar 3, 2022Updated 3 years ago
• AllsafeCyberSecurity / Ghidra_FIDB

  View on GitHub
  Function ID for Malware Analysis
  ☆13Jul 6, 2020Updated 5 years ago
• Velocidex / eql2vql

  View on GitHub
  Transform EQL detection rules to VQL artifacts
  ☆12Nov 12, 2021Updated 4 years ago
• bromiley / tools

  View on GitHub
  Various tools and scripts
  ☆43Nov 30, 2022Updated 3 years ago
• msuhanov / regf-samples

  View on GitHub
  Windows registry samples
  ☆24Nov 18, 2018Updated 7 years ago
• truekonrads / kpulp

  View on GitHub
  Konrads' Pen-Ultimate (Windows) Log File Parser
  ☆14Dec 27, 2025Updated last month
• SneakyNachos / MalwareAnalysisTraining

  View on GitHub
  Work in Progress repo
  ☆15Apr 18, 2019Updated 6 years ago
• Maboalenen / DFIR

  View on GitHub
  Incident response teams usually working on the offline data, collecting the evidence, then analyze the data
  ☆45Jan 2, 2022Updated 4 years ago
• leeberg / ActivitySimulator

  View on GitHub
  A simple utility to generate real File and Active Directory activity in lab environments for the purposes of monitoring changes and detec…
  ☆11Dec 4, 2018Updated 7 years ago
• cmdaltr / elrond

  View on GitHub
  Accelerating the collection, processing, analysis and outputting of digital forensic artefacts.
  ☆32Nov 23, 2025Updated 2 months ago
• themeldingwars / Be.HexEditor

  View on GitHub
  A modified fork of Be.HexEditor for use in debug tools
  ☆14Jan 5, 2022Updated 4 years ago
• skilincer / CyberSource

  View on GitHub
  ☆13May 8, 2019Updated 6 years ago
• EricZimmerman / Issues

  View on GitHub
  This is a repository for reporting any issues in any of my software
  ☆13May 15, 2018Updated 7 years ago
• woanware / etw-event-dumper

  View on GitHub
  ☆33Feb 26, 2022Updated 3 years ago
• cisagov / vulnerable-instances

  View on GitHub
  Virtual machines that are set up with a variety of known vulnerabilities.
  ☆17Mar 1, 2022Updated 3 years ago
• AGDCservices / Misc-Malware-Analysis-Tools

  View on GitHub
  This repo contains miscellaneous tools to aid in your malware analysis.
  ☆13Mar 2, 2021Updated 4 years ago
• splunk / TA-misp_es

  View on GitHub
  MISP to Splunk Enterprise Security Theat Intelligence Framework Integration
  ☆14Jul 11, 2023Updated 2 years ago
• gchq / stroom-visualisations-dev

  View on GitHub
  A set of D3 data visualisations for use in Stroom dashboards or other applications
  ☆14Nov 4, 2025Updated 3 months ago
• AllsafeCyberSecurity / Ghidra_Data_Type

  View on GitHub
  for Windows Malware Analysis
  ☆15May 14, 2020Updated 5 years ago
• ArsenalRecon / SdbaParser

  View on GitHub
  Parser for Sdba memory pool tags
  ☆21Jul 16, 2021Updated 4 years ago
• zerber0s / mac_int

  View on GitHub
  macOS Artifact Intelligence Tool
  ☆13Apr 30, 2019Updated 6 years ago
• ret2jazzy / Struts-Apache-ExploitPack

  View on GitHub
  These are just some script which you can use to detect and exploit the Apache Struts Vulnerability (CVE-2017-5638)
  ☆16Mar 12, 2017Updated 8 years ago
• 504ensicsLabs / find_times

  View on GitHub
  Discover potential timestamps within the Windows Registry
  ☆19Apr 22, 2014Updated 11 years ago
• msuhanov / winmem_decompress

  View on GitHub
  Extract compressed memory pages from page-aligned data
  ☆47Sep 25, 2018Updated 7 years ago
• 0xf15h / docker_ghidra

  View on GitHub
  A Dockerized Ghidra Server
  ☆15Jan 9, 2021Updated 5 years ago
• weslambert / securityonion-strelka

  View on GitHub
  ☆13Oct 7, 2019Updated 6 years ago
• EricZimmerman / MFT

  View on GitHub
  MFT parser
  ☆74Feb 2, 2025Updated last year
• JohnLaTwC / PyPowerShellXray

  View on GitHub
  Python script to decode common encoded PowerShell scripts
  ☆217Jun 13, 2018Updated 7 years ago
• svch0stz / velociraptor-detections

  View on GitHub
  ☆22Jan 31, 2023Updated 3 years ago
• EricZimmerman / Sum

  View on GitHub
  ☆20Jan 10, 2025Updated last year
• chaoticmachinery / mass_triage_tools

  View on GitHub
  Mass Triage Tools
  ☆20Dec 16, 2025Updated 2 months ago
• The-DFIR-Report / cyberchef-recipes

  View on GitHub
  ☆21May 8, 2022Updated 3 years ago