airbus-cert / dnYara
A multi-platform .Net wrapper library for the native Yara library.
☆38Updated last year
Related projects ⓘ
Alternatives and complementary repositories for dnYara
- Extract common Windows artifacts from source images and VSCs☆65Updated 3 years ago
- $MFT parser (from live systems or a copy of the $MFT) and raw file copy utility☆36Updated 3 months ago
- Command line access to the Registry☆130Updated last week
- Parses the WMI object database....looking for persistence☆31Updated 4 years ago
- ☆213Updated 6 years ago
- Yet another registry parser☆129Updated 2 years ago
- C# wrapper around the Yara pattern matching library☆35Updated 2 years ago
- Extract BITS jobs from QMGR queue and store them as CSV records☆74Updated 4 months ago
- .NET wrapper for libyara built in C++ CLI used to easily incorporate yara into .NET projects☆51Updated 3 months ago
- Registry Explorer bookmark definitions☆41Updated last year
- Mario & Luigi - Tools for sniffing Windows Named Pipes communication☆129Updated 7 years ago
- Invoke-LiveResponse☆145Updated 2 years ago
- VSCode extension for the YARA pattern matching language☆63Updated 10 months ago
- A repository that maps API calls to Sysmon Event ID's.☆116Updated last year
- ☆60Updated last week
- Basic demo for Hidden Treasure talk.☆49Updated 7 years ago
- A simple utility to list all methods of a given .NET Assembly and to invoke them☆71Updated 3 years ago
- Full featured, offline Registry parser in C#☆220Updated 2 months ago
- PowerGRR is an API client library in PowerShell working on Windows, Linux and macOS for GRR automation and scripting.☆56Updated 2 years ago
- PowerShell Module for the Antimalware Scan Interface (AMSI)☆25Updated 8 years ago
- ConventionEngine - A Yara Rulepack for PDB Path Hunting☆37Updated last year
- A rewrite of mactime, a bodyfile reader☆36Updated 3 months ago
- Telsy CTI Research Team☆57Updated 3 years ago
- Detect possible sysmon logging bypasses given a specific configuration☆107Updated 5 years ago
- BinSequencer is a script designed to find a common pattern of bytes within a set of samples and generate a YARA rule from the identified…☆74Updated 2 years ago
- PowerShell No Agent Hunting☆107Updated 6 years ago
- Random hunting ordiented yara rules☆95Updated last year
- Windows Prefetch parser. Supports all known versions from Windows XP to Windows 10.☆105Updated 3 months ago
- hopefully a source-to-source deobfuscator, aiming at deobfuscating common scripts languages such as Powershell, VBA and Javascript. Curre…☆40Updated 5 years ago
- A library for fast parse & import of Windows Eventlogs into Elasticsearch.☆80Updated 4 months ago