Alternatives and similar repositories for solorigate_sample_source

Users that are interested in solorigate_sample_source are comparing it to the libraries listed below

• ITAYC0HEN / SUNBURST-Cracked
  The following repository contains a modified version of SUNBURST with cracekd hashes, comments and annotations.
  ☆56Updated 4 years ago
• silascutler / LnkParse
  Windows Shortcut file (LNK) parser
  ☆136Updated 2 years ago
• monnappa22 / HollowFind
  Hollowfind is a Volatility plugin to detect different types of process hollowing techniques used in the wild to bypass, confuse, deflect …
  ☆141Updated 3 years ago
• RichHeaderResearch / RichPE
  Metadata hash incorporating the Rich Header for robustness against packing and other malware tricks
  ☆69Updated 4 years ago
• sysopfb / malware_decoders
  Static based decoders for malware samples
  ☆94Updated 5 years ago
• kirk-sayre-work / VBASeismograph
  A tool for detecting VBA stomping.
  ☆100Updated 3 years ago
• endgameinc / ClrGuard
  ☆219Updated 7 years ago
• arntsonl / calc_security_poc
  A sample of proof of concept scripts that run Calc.exe with full source code.
  ☆97Updated last year
• intezer / analyze-community-ghidra-plugin
  Ghidra plugin for https://analyze.intezer.com
  ☆72Updated 3 years ago
• palantir / exploitguard
  Documentation and supporting script sample for Windows Exploit Guard
  ☆158Updated last month
• mandiant / win10_volatility
  An advanced memory forensics framework
  ☆96Updated 6 years ago
• denisugarte / PowerDrive
  A tool for de-obfuscating PowerShell scripts
  ☆71Updated 6 years ago
• kryptoslogic / rdppot
  RDP honeypot
  ☆67Updated 6 years ago
• OmerYa / Named-Pipe-Sniffer
  Mario & Luigi - Tools for sniffing Windows Named Pipes communication
  ☆129Updated 8 years ago
• cyb3rfox / MFTEntryCarver
  Carve files for MFT entries (eg. blkls output or memory dumps). Recovers filenames (long & short), timestamps ($STD & $FN) and data if re…
  ☆22Updated 6 years ago
• Neo23x0 / Rewind
  Immediate Virus Infection Counter Measures
  ☆63Updated 4 years ago
• williballenthin / python-sdb
  Pure Python parser for Application Compatibility Shim Databases (.sdb files)
  ☆109Updated 4 years ago
• Paul-Tew / lifer
  Windows link file (shortcuts) examiner
  ☆67Updated last year
• adamkramer / jmp2it
  Transfer EIP control to shellcode during malware analysis investigation
  ☆77Updated 11 years ago
• ohjeongwook / PowerShellRunBox
  Dynamic PowerShell Analysis Framework Based Upon PowerShell Debugging Functionality
  ☆83Updated 2 years ago
• MohitDabas / malwinx
  Just a normal flask web app to understand win32api with code snippets and references.
  ☆75Updated 5 years ago
• d00rt / emotet_network_protocol
  ☆84Updated 5 years ago
• xorhex / mlget
  A golang CLI tool to download malware from a variety of sources.
  ☆150Updated 4 months ago
• netspooky / inhale
  A malware analysis and classification tool.
  ☆190Updated 3 years ago
• you0708 / lznt1
  Python implementation of LZNT1 compression/decompression
  ☆65Updated 5 years ago
• dmaasland / mcafee-config-decrypt
  ☆60Updated 5 years ago
• mandiant / flare-kscldr
  FLARE Kernel Shellcode Loader
  ☆178Updated 6 years ago
• nmantani / FileInsight-plugins
  FileInsight-plugins: decoding toolbox of McAfee FileInsight hex editor for malware analysis
  ☆162Updated 10 months ago
• matterpreter / Shhmon
  Neutering Sysmon via driver unload
  ☆233Updated 3 years ago
• seifreed / awesome-sandbox-evasion
  A summary about different projects/presentations/tools to test how to evade malware sandbox systems
  ☆55Updated 6 years ago