Alternatives and similar repositories for pcodedmp

Users that are interested in pcodedmp are comparing it to the libraries listed below

• Big5-sec / pcode2code
  a vba pcode decompiler based on pcodedmp
  ☆112Updated 4 years ago
• MalwareCantFly / Vba2Graph
  Vba2Graph - Generate call graphs from VBA code, for easier analysis of malicious documents.
  ☆279Updated 4 years ago
• decalage2 / ViperMonkey
  A VBA parser and emulation engine to analyze malicious macros.
  ☆1,115Updated last year
• joesecurity / pafishmacro
  Pafish Macro is a Macro enabled Office Document to detect malware analysis systems and sandboxes. It uses evasion & detection techniques …
  ☆293Updated 8 years ago
• msuhanov / regf
  Windows registry file format specification
  ☆352Updated 7 years ago
• R3MRUM / PSDecode
  PowerShell script for deobfuscating encoded PowerShell scripts
  ☆430Updated 4 years ago
• mandiant / flare-wmi
  ☆431Updated 2 years ago
• jschicht / RawCopy
  Commandline low level file extractor for NTFS
  ☆307Updated 6 years ago
• unixfreak0037 / officeparser
  Extract embedded files and macros from office documents.
  ☆186Updated 2 years ago
• eset / vba-dynamic-hook
  VBA Dynamic Hook dynamically analyzes VBA macros inside Office documents by hooking function calls
  ☆151Updated 9 years ago
• felixweyne / ProcessSpawnControl
  Process Spawn Control is a Powershell tool which aims to help in the behavioral (process) analysis of malware. PsC suspends newly launche…
  ☆264Updated 3 years ago
• DissectMalware / XLMMacroDeobfuscator
  Extract and Deobfuscate XLM macros (a.k.a Excel 4.0 Macros)
  ☆584Updated last year
• kirk-sayre-work / VBASeismograph
  A tool for detecting VBA stomping.
  ☆101Updated 3 years ago
• fireeye / pywintrace
  ETW Python Library
  ☆293Updated 2 years ago
• Pepitoh / VBad
  VBA Obfuscation Tools combined with an MS office document generator
  ☆554Updated 8 years ago
• felixweyne / imaginaryC2
  Imaginary C2 is a python tool which aims to help in the behavioral (network) analysis of malware. Imaginary C2 hosts a HTTP server which …
  ☆447Updated 3 years ago
• rowingdude / analyzeMFT
  analyzeMFT.py is designed to fully parse the MFT file from an NTFS filesystem and present the results as accurately as possible in multip…
  ☆517Updated 4 months ago
• williballenthin / python-sdb
  Pure Python parser for Application Compatibility Shim Databases (.sdb files)
  ☆109Updated 4 years ago
• williballenthin / INDXParse
  Tool suite for inspecting NTFS artifacts.
  ☆227Updated 2 years ago
• endgameinc / ClrGuard
  ☆220Updated 7 years ago
• marcosd4h / memhunter
  Live hunting of code injection techniques
  ☆385Updated 6 years ago
• nmantani / FileInsight-plugins
  FileInsight-plugins: decoding toolbox of McAfee FileInsight hex editor for malware analysis
  ☆163Updated last year
• kirk-sayre-work / ViperMonkey
  A VBA parser and emulation engine to analyze malicious macros.
  ☆97Updated last week
• williballenthin / python-registry
  Pure Python parser for Windows Registry hives.
  ☆439Updated 11 months ago
• mkorman90 / regipy
  Regipy is an os independent python library for parsing offline registry hives
  ☆265Updated this week
• libyal / libevtx
  Library and tools to access the Windows XML Event Log (EVTX) format
  ☆224Updated 3 weeks ago
• monnappa22 / HollowFind
  Hollowfind is a Volatility plugin to detect different types of process hollowing techniques used in the wild to bypass, confuse, deflect …
  ☆142Updated 3 years ago
• therealdreg / anticuckoo
  A tool to detect and crash Cuckoo Sandbox
  ☆296Updated last year
• silence-is-best / c2db
  c2 traffic
  ☆192Updated 2 years ago
• misterch0c / what_is_this_c2
  For all these times you're asking yourself "what is this panel again?"
  ☆259Updated 2 years ago