Alternatives and similar repositories for yara-ttd

Users that are interested in yara-ttd are comparing it to the libraries listed below

• caoweiquan322 / NotEnough

  View on GitHub
  This tool calculates tricky canonical huffman histogram for CVE-2023-4863.
  ☆26Dec 20, 2023Updated 2 years ago
• airbus-cert / ttd2mdmp

  View on GitHub
  Extract data of TTD trace file to a minidump
  ☆31Jul 31, 2023Updated 2 years ago
• mel2oo / Driver-for-windows

  View on GitHub
  ☆17Jun 30, 2020Updated 5 years ago
• google / vxsig

  View on GitHub
  Automatically generate AV byte signatures from sets of similar binaries.
  ☆286Dec 10, 2024Updated last year
• chnzzh / batch-ida

  View on GitHub
  A python library for generate ida pro files (*.idb/*.i64) in batch mode & compare executable files use bindiff in batch mode.
  ☆32Jul 9, 2025Updated 7 months ago
• airbus-seclab / nbutools

  View on GitHub
  Tools for offensive security of NetBackup infrastructures
  ☆43Jun 6, 2023Updated 2 years ago
• ANSSI-FR / sftp2misp

  View on GitHub
  Automation script to download JSON MISP files from a SFTP server and import them via API to a MISP instance.
  ☆15May 12, 2023Updated 2 years ago
• mattnotmitt / libyara-wasm

  View on GitHub
  PoC compilation of libyara into WASM, for potential future CyberChef integration
  ☆14Sep 18, 2022Updated 3 years ago
• VirusTotal / vt-ida-plugin

  View on GitHub
  Official VirusTotal plugin for IDA Pro
  ☆177Feb 4, 2026Updated last week
• huoji120 / cpu_duck

  View on GitHub
  关于intel和amd指令行为不一样这件事
  ☆62Apr 15, 2022Updated 3 years ago
• commial / ttd-bindings

  View on GitHub
  Bindings for Microsoft WinDBG TTD
  ☆234Aug 5, 2023Updated 2 years ago
• P1tt1cus / FastSymApi

  View on GitHub
  FastSymApi - A Fast API PDB Symbol Cache Server that efficiently caches and compresses PDBs on disk for quick and repeated retrieval.
  ☆19Updated this week
• learn-more / MemView

  View on GitHub
  Show all mapped memory in a process
  ☆21Oct 27, 2023Updated 2 years ago
• huoji120 / Heuristic_antivirus_engine_by_huoji

  View on GitHub
  基于UC的启发式杀毒引擎[还没做完]
  ☆35Mar 28, 2021Updated 4 years ago
• yjugl / mitimon

  View on GitHub
  Monitor ETW events for Windows process mitigation policies, with stack traces
  ☆31Oct 7, 2022Updated 3 years ago
• ExaTrack / Kdrill

  View on GitHub
  Python tool to check rootkits in Windows kernel
  ☆207Aug 20, 2025Updated 5 months ago
• huoji120 / safe_duck

  View on GitHub
  一款linux下的安全产品目的是满足个人安全需求有SSH爆破防护和SYN攻击扫描防护功能,基于netfilter,
  ☆23Dec 2, 2023Updated 2 years ago
• airbus-cert / vbSparkle

  View on GitHub
  VBScript & VBA source-to-source deobfuscator with partial-evaluation
  ☆80Aug 7, 2024Updated last year
• KasperskyLab / Apihashes

  View on GitHub
  IDA Pro plugin for recognizing known hashes of API function names
  ☆83May 12, 2022Updated 3 years ago
• airbus-cert / ttddbg

  View on GitHub
  Time Travel Debugging IDA plugin
  ☆593Jun 27, 2024Updated last year
• evandowning / windbg-trace

  View on GitHub
  Use WinDBG to trace the Windows API calls of any Portable Executable file
  ☆32Apr 13, 2017Updated 8 years ago
• thalium / vminer

  View on GitHub
  ☆90Feb 12, 2025Updated last year
• 0vercl0k / kdmp-parser

  View on GitHub
  A Windows kernel dump C++ parser library with Python 3 bindings.
  ☆213Oct 5, 2025Updated 4 months ago
• P-i-N / sbp

  View on GitHub
  Structured Bindings Pack - serialize C++ structs into MessagePack binary form
  ☆21Nov 4, 2020Updated 5 years ago
• 0xDivyanshu-new / CVE-2023-29360

  View on GitHub
  POC for CVE-2023-29360
  ☆12Aug 31, 2024Updated last year
• n1ght-w0lf / pe-unmapper

  View on GitHub
  A small tool to unmap PE memory dumps.
  ☆11Nov 9, 2023Updated 2 years ago
• 0vercl0k / symbolizer

  View on GitHub
  A fast execution trace symbolizer for Windows.
  ☆130May 6, 2024Updated last year
• xqrzd / HazardShield

  View on GitHub
  ☆21Oct 4, 2015Updated 10 years ago
• yuanLink / CVE-2022-26809

  View on GitHub
  ☆61May 25, 2022Updated 3 years ago
• airbus-cert / minusone

  View on GitHub
  Powershell Linter
  ☆87Feb 6, 2026Updated last week
• avast / yarang

  View on GitHub
  Alternative YARA scanning engine
  ☆73Aug 23, 2022Updated 3 years ago
• airbus-cert / dirtypipe-ebpf_detection

  View on GitHub
  An eBPF detection program for CVE-2022-0847
  ☆29Jul 5, 2022Updated 3 years ago
• tathanhdinh / keystone-rs

  View on GitHub
  Rust binding for Keystone assembler framework
  ☆11Dec 9, 2018Updated 7 years ago
• retn-ux / qt5_resolver

  View on GitHub
  X32DBG QT5 parsing scripts
  ☆11Sep 8, 2022Updated 3 years ago
• gustavoparedes / QuickLog

  View on GitHub
  Is a portable forensic tool for analyzing Windows logs, pre-organized according to the methodology outlined in this job: https://cybersec…
  ☆14Jul 19, 2025Updated 6 months ago
• kernullist / krn_pcre

  View on GitHub
  Windows Kernel Mode PCRE
  ☆10Feb 4, 2015Updated 11 years ago
• KANKOSHEV / Detect-VM-and-Hypervisor

  View on GitHub
  Detect VM and Hypervisor
  ☆10Jun 16, 2021Updated 4 years ago
• orca-eaa5a / mac-defender

  View on GitHub
  ☆11Jan 8, 2022Updated 4 years ago
• blaquee / DbgFlashVul

  View on GitHub
  DbgFlashVul
  ☆12Sep 8, 2015Updated 10 years ago