Sh3lldor / PVTLinks
PCAP visualization tool
☆104Updated 2 years ago
Alternatives and similar repositories for PVT
Users that are interested in PVT are comparing it to the libraries listed below
Sorting:
- Arya is a unique tool that produces pseudo-malicious files meant to trigger YARA rules. You can think of it like a reverse YARA.☆259Updated 3 years ago
- This repository contains procedures found in the Feb 2022 conti leaks. They were taken from the "manual_teams_c" rocketchat channel in th…☆87Updated 3 years ago
- The Dissect module tying all other Dissect modules together. It provides a programming API and command line tools which allow easy access…☆77Updated last week
- A collection of tools to interact with Microsoft Security Response Center API☆110Updated last year
- A repo to support the book☆112Updated 4 years ago
- Reads and prints information from the website MalAPI.io☆39Updated 3 years ago
- ☆211Updated last month
- A Feature Rich Modular Malware Configuration Extraction Utility for MalDuck☆130Updated 2 years ago
- ☆50Updated 5 months ago
- The Windows Malware Analysis Reversing Core Tools☆97Updated 5 years ago
- BSidesRoc 2022 Linux Malware/Forensics Course☆76Updated 3 years ago
- Fraktal's Ransomware Emulator☆101Updated last year
- Visually inspect and force decode YARA and regex matches found in both binary and text data with colors. Lots of colors.☆144Updated 3 weeks ago
- ☆212Updated last month
- Data visualization for blue teams☆127Updated 2 years ago
- A golang CLI tool to download malware from a variety of sources.☆151Updated 6 months ago
- Rules Shared by the Community from 100 Days of YARA 2023☆78Updated 2 years ago
- A YARA rules repository continuously updated for monitoring the old and new threats from articles, incidents responses ...☆141Updated 2 years ago
- All kinds of tiny shells☆65Updated 2 years ago
- A Jupyter notebook to assist with the analysis of the output generated from Volatility memory extraction framework.☆97Updated 2 years ago
- LOLESXi is a curated compilation of binaries/scripts available in VMware ESXi that are were used to by adversaries in their intrusions. T…☆143Updated 3 weeks ago
- A Python package is used to execute Atomic Red Team tests (Atomics) across multiple operating system environments.☆137Updated last year
- This repository contains the code and PCAPS used for the SANS webinar, "Hacking Proprietary Protocols" given on February 23, 2021.☆34Updated 3 years ago
- A zero dependency and customizable Python library for scanning Windows and Linux process memory.☆66Updated last year
- A ProcessMonitor visualization application written in rust.☆183Updated 2 years ago
- Powershell Linter☆86Updated last month
- Malware vulnerability intel tool for third-party attackers☆122Updated last year
- Collect-MemoryDump - Automated Creation of Windows Memory Snapshots for DFIR☆251Updated 2 months ago
- YARA rule analyzer to improve rule quality and performance☆108Updated 9 months ago
- Yara Rules for Modern Malware☆78Updated last year