airbus-cert / dnYara
A multi-platform .Net wrapper library for the native Yara library.
☆38Updated last year
Alternatives and similar repositories for dnYara:
Users that are interested in dnYara are comparing it to the libraries listed below
- Extract common Windows artifacts from source images and VSCs☆66Updated 3 years ago
- VSCode extension for the YARA pattern matching language☆63Updated last year
- Parses the WMI object database....looking for persistence☆31Updated 5 years ago
- $MFT parser (from live systems or a copy of the $MFT) and raw file copy utility☆36Updated 6 months ago
- Extract BITS jobs from QMGR queue and store them as CSV records☆74Updated 6 months ago
- ☆213Updated 6 years ago
- A simple utility to list all methods of a given .NET Assembly and to invoke them☆72Updated 3 years ago
- Yet another registry parser☆130Updated 2 years ago
- Mario & Luigi - Tools for sniffing Windows Named Pipes communication☆129Updated 8 years ago
- C# wrapper around the Yara pattern matching library☆36Updated 2 years ago
- Registry Explorer bookmark definitions☆41Updated last month
- Command line access to the Registry☆134Updated this week
- Random hunting ordiented yara rules☆95Updated last year
- Windows Prefetch parser. Supports all known versions from Windows XP to Windows 10.☆108Updated last week
- .NET wrapper for libyara built in C++ CLI used to easily incorporate yara into .NET projects☆53Updated 5 months ago
- Invoke-LiveResponse☆145Updated 2 years ago
- A repository that maps API calls to Sysmon Event ID's.☆117Updated 2 years ago
- Lnk file parser☆79Updated last week
- Detect possible sysmon logging bypasses given a specific configuration☆107Updated 6 years ago
- Reconstruct process trees from event logs☆146Updated 4 years ago
- ConventionEngine - A Yara Rulepack for PDB Path Hunting☆37Updated last year
- Sandbox feature upgrade with the help of wrapped samples☆75Updated 6 years ago
- ☆61Updated last week
- Python bindings for https://github.com/omerbenamram/evtx/☆50Updated last month
- A rewrite of mactime, a bodyfile reader☆37Updated 5 months ago
- Pure Python parser for Application Compatibility Shim Databases (.sdb files)☆107Updated 3 years ago
- Tool to decompress data from Windows 10 page files and memory dumps, that has been compressed by the Windows 10 memory manager.☆49Updated 5 years ago
- PowerGRR is an API client library in PowerShell working on Windows, Linux and macOS for GRR automation and scripting.☆56Updated 2 years ago
- Malware Configuration And Payload Extraction☆18Updated 4 years ago