Squiblydoo / debloat
A GUI and CLI tool for removing bloat from executables
☆399Updated 3 weeks ago
Alternatives and similar repositories for debloat:
Users that are interested in debloat are comparing it to the libraries listed below
- A PowerShell script that attempts to help malware analysts hide their VMware Windows VM's from malware that may be trying to evade analys…☆348Updated 3 months ago
- A repository of credential stealer formats☆213Updated last month
- PowerDecode is a PowerShell-based tool that allows to deobfuscate PowerShell scripts obfuscated across multiple layers. The tool performs…☆184Updated last year
- Different learning materials☆226Updated last month
- MemProcFS-Analyzer - Automated Forensic Analysis of Windows Memory Dumps for DFIR☆621Updated last month
- A ProcessMonitor visualization application written in rust.☆178Updated last year
- Handbook of windows forensic artifacts across multiple Windows version with interpretation tips and some examples. Work in progress!☆345Updated 8 months ago
- Chocolatey packages supporting the analysis environment projects FLARE-VM & Commando VM.☆175Updated this week
- A PowerShell script that attempts to help malware analysts hide their Windows VirtualBox Windows VM's from malware that may be trying to …☆294Updated 2 years ago
- ☆489Updated last year
- A list of useful tools for Malware Analysis (will be updated regularly)☆141Updated 8 months ago
- ☆158Updated last year
- ☆201Updated 6 months ago
- Unprotect is a collaborative platform dedicated to uncovering and documenting malware evasion techniques. We invite you to join us in thi…☆160Updated last month
- CLI tools for forensic investigation of Windows artifacts☆327Updated 6 months ago
- Living Off The Land Drivers☆1,160Updated last month
- Segugio allows the execution and tracking of critical steps in the malware detonation process, from clicking on the first stage to extrac…☆149Updated 7 months ago
- Python tool to check rootkits in Windows kernel☆196Updated 2 months ago
- WMI virus, because funny☆280Updated 3 months ago
- DFIR LABS - A compilation of challenges that aims to provide practice in simple to advanced concepts in the following topics: Digital For…☆197Updated 2 months ago
- ☆221Updated 3 months ago
- High Octane Triage Analysis☆725Updated this week
- Parses $MFT from NTFS file systems☆235Updated last week
- A centralized and enhanced memory analysis platform☆458Updated 3 months ago
- Repository of Yara Rules☆110Updated 3 weeks ago
- Records an executable's network activity into a Full Packet Capture file (.pcap) and much more.☆378Updated 3 weeks ago
- Memory acquisition for Linux that makes sense.☆187Updated last year
- FLARE Team's Binary Navigator☆252Updated 3 weeks ago
- SHAREM is a shellcode analysis framework, capable of emulating more than 20,000 WinAPIs and virutally all Windows syscalls. It also conta…☆388Updated last month
- ☆129Updated last month