Squiblydoo / debloat
A GUI and CLI tool for removing bloat from executables
☆365Updated 2 weeks ago
Alternatives and similar repositories for debloat:
Users that are interested in debloat are comparing it to the libraries listed below
- Handbook of windows forensic artifacts across multiple Windows version with interpretation tips and some examples. Work in progress!☆306Updated 5 months ago
- MemProcFS-Analyzer - Automated Forensic Analysis of Windows Memory Dumps for DFIR☆565Updated last month
- A PowerShell script that attempts to help malware analysts hide their VMware Windows VM's from malware that may be trying to evade analys…☆291Updated 10 months ago
- PowerDecode is a PowerShell-based tool that allows to deobfuscate PowerShell scripts obfuscated across multiple layers. The tool performs…☆165Updated 8 months ago
- Nuke It From Orbit - remove AV/EDR with physical access☆252Updated last month
- ☆480Updated last year
- Memory acquisition for Linux that makes sense.☆166Updated last year
- A ProcessMonitor visualization application written in rust.☆176Updated last year
- Python tool to check rootkits in Windows kernel☆180Updated 2 months ago
- A repository of credential stealer formats☆129Updated this week
- WTF are these binaries doing?! A list of benign applications that mimic malicious behavior.☆153Updated 2 months ago
- ☆196Updated 2 months ago
- Living Off The Land Drivers☆1,078Updated this week
- Segugio allows the execution and tracking of critical steps in the malware detonation process, from clicking on the first stage to extrac…☆145Updated 3 months ago
- Different learning materials☆220Updated 5 months ago
- A centralized and enhanced memory analysis platform☆401Updated last month
- ☆154Updated last year
- Automated YARA Rule Standardization and Quality Assurance Tool☆179Updated last week
- CLI tools for forensic investigation of Windows artifacts☆321Updated 2 months ago
- High Octane Triage Analysis☆693Updated last week
- A repo that contains recursive directory listings (using PowerShell) of a vanilla (clean) install of every Windows OS version to compare …☆150Updated last month
- IATelligence is a Python script that will extract the IAT of a PE file and request GPT to get more information about the API and the ATT&…☆357Updated 2 years ago
- A tool that takes over Windows Updates to craft custom downgrades and expose past fixed vulnerabilities☆645Updated 2 months ago
- ☆186Updated last week
- ☆227Updated 8 months ago
- This repository contains sample programs that mimick behavior found in real-world malware. The goal is to provide source code that can be…☆614Updated 6 months ago
- Chocolatey packages supporting the analysis environment projects FLARE-VM & Commando VM.☆155Updated this week
- A PowerShell script that attempts to help malware analysts hide their Windows VirtualBox Windows VM's from malware that may be trying to …☆283Updated last year
- The CIA's Marble Framework is designed to allow for flexible and easy-to-use obfuscation when developing tools.☆295Updated last year
- This is a Ghidra script that calls OPENAI to give meaning to decompiled functions☆121Updated 5 months ago