Alternatives and similar repositories for winnti-detector

Users that are interested in winnti-detector are comparing it to the libraries listed below

• techbliss / Yara_Mailware_Quick_menu_scanner
  Work Fast With the pattern matching swiss knife for malware researchers.
  ☆38Updated 9 years ago
• jacobsoo / DDE-Extractor
  This script is used for extracting DDE in docx and xlsx
  ☆12Updated 7 years ago
• itsreallynick / office-crackros
  Crack your macros like the math pros.
  ☆33Updated 8 years ago
• nccgroup / Royal_APT
  Royal APT - APT15 - Related Information from NCC Group Cyber Defense Operations Research
  ☆53Updated 7 years ago
• theevilbit / vaccination
  ☆10Updated 8 years ago
• DissectMalware / MalwareCMDMonitor
  Shows command lines used by latest instances analyzed on Hybrid-Analysis
  ☆43Updated 7 years ago
• eset / volatility-browserhooks
  Volatility Framework plugin to detect various types of hooks as performed by banking Trojans
  ☆40Updated 6 years ago
• mandiant / remote_lookup
  Resolves DLL API entrypoints for a process w/ remote query capabilities.
  ☆56Updated 8 years ago
• RISCYBusiness / Jadoube
  ☆22Updated 8 years ago
• mandiant / rvmi-qemu
  QEMU with rVMI extensions
  ☆24Updated 8 years ago
• JR0driguezB / malware_analysis
  Various snippets created during malware analysis
  ☆22Updated 7 years ago
• GelosSnake / MalwareResearchAPI
  API functions for Malware Research
  ☆35Updated 6 years ago
• blacknbunny / peanalyzer
  Advanced Portable Executable File Analyzer And Disassembler 32 & 64 Bit
  ☆100Updated 6 years ago
• darkquasar / WMI_Persistence
  A repo to hold some scripts pertaining WMI (Windows implementation of WBEM) forensics
  ☆87Updated 8 years ago
• binarlyhq / binarly-query
  Command-line Interface for Binar.ly
  ☆38Updated 8 years ago
• ring0x0 / honeydrops
  An automated collection and analysis of malware from my honeypots.
  ☆25Updated 7 years ago
• TheEnergyStory / malware_analysis
  Malware analyses and helpful scripts
  ☆29Updated 3 years ago
• 0xAnalyst / Sysmon
  Sysmon config for both Windows and Linux Devices. Windows one is a bit dated
  ☆56Updated last year
• OsandaMalith / VBShellCode
  Making shellcode UD - https://osandamalith.com
  ☆25Updated 9 years ago
• JamesHabben / MalwareStuff
  ☆16Updated 10 years ago
• matthastings / PSalander
  ☆52Updated 7 years ago
• serializingme / emofishes
  Emofishes is a collection of proof-of-concepts that help improve, bypass or detect virtualized execution environments (focusing on the on…
  ☆15Updated 2 years ago
• msuiche / malcheck
  Portable utility to check if a machine has been infected by Shamoon2
  ☆15Updated 8 years ago
• brad-sp / community-modified
  Modified edition of cuckoo community modules
  ☆32Updated 6 years ago
• dungtv543 / Dutas
  Analysis PE file or Shellcode
  ☆50Updated 9 years ago
• Th4nat0s / No_Sandboxes
  Test suite for bypassing Malware sandboxes.
  ☆39Updated 11 years ago
• MotiBa / ProcessMonitorAnalyzeMalware
  Script to parse Process Monitor XML log file, and give you a summary report.
  ☆24Updated 9 years ago
• ShellcodeSmuggler / IAT_POC
  POC for IAT Parsing Payloads
  ☆48Updated 8 years ago
• arieljt / VTSubmitter-Maltego
  A Maltego transform for VirusTotal Submitter Information
  ☆35Updated 6 years ago
• bsi-group / autorun-logger-server
  Server for receiving autorun data from the clients
  ☆13Updated 8 years ago