Use YARA rules on Time Travel Debugging traces
☆97Jul 11, 2023Updated 2 years ago
Alternatives and similar repositories for yara-ttd
Users that are interested in yara-ttd are comparing it to the libraries listed below. We may earn a commission when you buy through links labeled 'Ad' on this page.
Sorting:
- Tools for offensive security of NetBackup infrastructures☆44Jun 6, 2023Updated 2 years ago
- Extract data of TTD trace file to a minidump☆30Jul 31, 2023Updated 2 years ago
- Powershell/Javascript deobfuscator based on tree-sitter☆93Updated this week
- A program to read and modify the memory of other processes.☆20May 19, 2023Updated 2 years ago
- VBScript & VBA source-to-source deobfuscator with partial-evaluation☆80Aug 7, 2024Updated last year
- Serverless GPU API endpoints on Runpod - Bonus Credits • AdSkip the infrastructure headaches. Auto-scaling, pay-as-you-go, no-ops approach lets you focus on innovating your application.
- Automatically generate AV byte signatures from sets of similar binaries.☆286Dec 10, 2024Updated last year
- ☆55Oct 12, 2024Updated last year
- This tool calculates tricky canonical huffman histogram for CVE-2023-4863.☆26Dec 20, 2023Updated 2 years ago
- Bindings for Microsoft WinDBG TTD☆239Aug 5, 2023Updated 2 years ago
- ☆17Jun 30, 2020Updated 5 years ago
- Python tool to check rootkits in Windows kernel☆210Aug 20, 2025Updated 7 months ago
- Automation script to download JSON MISP files from a SFTP server and import them via API to a MISP instance.☆15May 12, 2023Updated 2 years ago
- ☆89Feb 12, 2025Updated last year
- Time Travel Debugging IDA plugin☆595Jun 27, 2024Updated last year
- Virtual machines for every use case on DigitalOcean • AdGet dependable uptime with 99.99% SLA, simple security tools, and predictable monthly pricing with DigitalOcean's virtual machines, called Droplets.
- Windows Kernel Mode PCRE☆10Feb 4, 2015Updated 11 years ago
- PoC compilation of libyara into WASM, for potential future CyberChef integration☆14Sep 18, 2022Updated 3 years ago
- Official VirusTotal plugin for IDA Pro☆181Feb 4, 2026Updated 2 months ago
- ☆21Oct 4, 2015Updated 10 years ago
- Lightweight WINAPI tracing with Pin☆27Aug 22, 2019Updated 6 years ago
- 一款linux下的安全产品目的是满足个人安全需求有SSH爆破防护和SYN攻击扫描防护功能,基于netfilter,☆23Dec 2, 2023Updated 2 years ago
- Monitor ETW events for Windows process mitigation policies, with stack traces☆31Oct 7, 2022Updated 3 years ago
- Rules Shared by the Community from 100 Days of YARA 2023☆78Apr 12, 2023Updated 3 years ago
- 基于UC的启发式杀毒引擎[还没做完]☆35Mar 28, 2021Updated 5 years ago
- AI Agents on DigitalOcean Gradient AI Platform • AdBuild production-ready AI agents using customizable tools or access multiple LLMs through a single endpoint. Create custom knowledge bases or connect external data.
- Scanner for CVE-2024-4040☆51May 17, 2024Updated last year
- 关于intel和amd指令行为不一样这件事☆62Apr 15, 2022Updated 4 years ago
- ☆23Dec 15, 2022Updated 3 years ago
- POC for CVE-2023-29360☆12Aug 31, 2024Updated last year
- Reviews and tests of security products☆17Dec 28, 2024Updated last year
- Blogpost about optimizing binary-only fuzzing with AFL++☆70Oct 7, 2023Updated 2 years ago
- A python library for generate ida pro files (*.idb/*.i64) in batch mode & compare executable files use bindiff in batch mode.☆32Jul 9, 2025Updated 9 months ago
- IDA Pro plugin for recognizing known hashes of API function names☆83May 12, 2022Updated 3 years ago
- The hidden mstsc recorder player☆27Mar 9, 2020Updated 6 years ago
- Managed hosting for WordPress and PHP on Cloudways • AdManaged hosting for WordPress, Magento, Laravel, or PHP apps, on multiple cloud providers. Deploy in minutes on Cloudways by DigitalOcean.
- Suricata rules to detect Winnti communication☆16Mar 5, 2018Updated 8 years ago
- USB HID driver emulation with PID/VID (0x3bca/0x27bb) of Plenom A/S Busylight Alpha, that is supported by Mimikatz. When mimikatz is exec…☆21Sep 6, 2022Updated 3 years ago
- Summarize CTI reports with OpenAI☆18Updated this week
- A Rust crate for parsing Windows user minidumps.☆40May 1, 2024Updated last year
- A ProcessMonitor visualization application written in rust.☆184Aug 6, 2023Updated 2 years ago
- Structured Bindings Pack - serialize C++ structs into MessagePack binary form☆21Nov 4, 2020Updated 5 years ago
- A Windows kernel dump C++ parser library with Python 3 bindings.☆214Oct 5, 2025Updated 6 months ago