Use YARA rules on Time Travel Debugging traces
☆96Jul 11, 2023Updated 2 years ago
Alternatives and similar repositories for yara-ttd
Users that are interested in yara-ttd are comparing it to the libraries listed below. We may earn a commission when you buy through links labeled 'Ad' on this page.
Sorting:
- Tools for offensive security of NetBackup infrastructures☆44Jun 6, 2023Updated 2 years ago
- Extract data of TTD trace file to a minidump☆30Jul 31, 2023Updated 2 years ago
- Powershell/Javascript deobfuscator based on tree-sitter☆93Mar 23, 2026Updated last week
- A program to read and modify the memory of other processes.☆20May 19, 2023Updated 2 years ago
- VBScript & VBA source-to-source deobfuscator with partial-evaluation☆80Aug 7, 2024Updated last year
- 1-Click AI Models by DigitalOcean Gradient • AdDeploy popular AI models on DigitalOcean Gradient GPU virtual machines with just a single click and start building anything your business needs.
- Automatically generate AV byte signatures from sets of similar binaries.☆287Dec 10, 2024Updated last year
- ☆55Oct 12, 2024Updated last year
- This tool calculates tricky canonical huffman histogram for CVE-2023-4863.☆26Dec 20, 2023Updated 2 years ago
- Bindings for Microsoft WinDBG TTD☆235Aug 5, 2023Updated 2 years ago
- ☆17Jun 30, 2020Updated 5 years ago
- Python tool to check rootkits in Windows kernel☆207Aug 20, 2025Updated 7 months ago
- Automation script to download JSON MISP files from a SFTP server and import them via API to a MISP instance.☆15May 12, 2023Updated 2 years ago
- ☆90Feb 12, 2025Updated last year
- Time Travel Debugging IDA plugin☆596Jun 27, 2024Updated last year
- Proton VPN Special Offer - Get 70% off • AdSpecial partner offer. Trusted by over 100 million users worldwide. Tested, Approved and Recommended by Experts.
- Windows Kernel Mode PCRE☆10Feb 4, 2015Updated 11 years ago
- Rust binding for Keystone assembler framework☆11Dec 9, 2018Updated 7 years ago
- PoC compilation of libyara into WASM, for potential future CyberChef integration☆14Sep 18, 2022Updated 3 years ago
- ☆21Oct 4, 2015Updated 10 years ago
- Official VirusTotal plugin for IDA Pro☆181Feb 4, 2026Updated last month
- Lightweight WINAPI tracing with Pin☆27Aug 22, 2019Updated 6 years ago
- 一款linux下的安全产品目的是满足个人安全需求有SSH爆破防护和SYN攻击扫描防护功能,基于netfilter,☆23Dec 2, 2023Updated 2 years ago
- Monitor ETW events for Windows process mitigation policies, with stack traces☆31Oct 7, 2022Updated 3 years ago
- Rules Shared by the Community from 100 Days of YARA 2023☆78Apr 12, 2023Updated 2 years ago
- Bare Metal GPUs on DigitalOcean Gradient AI • AdPurpose-built for serious AI teams training foundational models, running large-scale inference, and pushing the boundaries of what's possible.
- 基于UC的启发式杀毒引擎[还没做完]☆35Mar 28, 2021Updated 5 years ago
- 关于intel和amd指令行为不一样这件事☆62Apr 15, 2022Updated 3 years ago
- ☆23Dec 15, 2022Updated 3 years ago
- POC for CVE-2023-29360☆12Aug 31, 2024Updated last year
- Reviews and tests of security products☆17Dec 28, 2024Updated last year
- Blogpost about optimizing binary-only fuzzing with AFL++☆71Oct 7, 2023Updated 2 years ago
- An eBPF detection program for CVE-2022-0847☆29Jul 5, 2022Updated 3 years ago
- A python library for generate ida pro files (*.idb/*.i64) in batch mode & compare executable files use bindiff in batch mode.☆32Jul 9, 2025Updated 8 months ago
- IDA Pro plugin for recognizing known hashes of API function names☆83May 12, 2022Updated 3 years ago
- DigitalOcean Gradient AI Platform • AdBuild production-ready AI agents using customizable tools or access multiple LLMs through a single endpoint. Create custom knowledge bases or connect external data.
- The hidden mstsc recorder player☆27Mar 9, 2020Updated 6 years ago
- Suricata rules to detect Winnti communication☆16Mar 5, 2018Updated 8 years ago
- USB HID driver emulation with PID/VID (0x3bca/0x27bb) of Plenom A/S Busylight Alpha, that is supported by Mimikatz. When mimikatz is exec…☆21Sep 6, 2022Updated 3 years ago
- Summarize CTI reports with OpenAI☆18Mar 23, 2026Updated last week
- A Rust crate for parsing Windows user minidumps.☆41May 1, 2024Updated last year
- A ProcessMonitor visualization application written in rust.☆184Aug 6, 2023Updated 2 years ago
- Structured Bindings Pack - serialize C++ structs into MessagePack binary form☆21Nov 4, 2020Updated 5 years ago