Scripts and rulesets for analysing the Winnti malware
☆24Jul 24, 2019Updated 7 years ago
Alternatives and similar repositories for 2019-winnti-analyse
Users that are interested in 2019-winnti-analyse are comparing it to the libraries listed below. We may earn a commission when you buy through links labeled 'Ad' on this page.
Sorting:
- A project in Golang that will create prefix-based magic MD5 hashes for type juggling.☆21Jul 29, 2018Updated 8 years ago
- Exploit Development and Reverse Engineering with GDB Made Easy☆18Jun 25, 2019Updated 7 years ago
- QEMU with rVMI extensions☆26Jul 25, 2017Updated 9 years ago
- pocket guide for core threat hunting concepts☆23May 6, 2020Updated 6 years ago
- Imphash-like calculation on Golang binaries☆50Jul 2, 2022Updated 4 years ago
- Serverless GPU API endpoints on Runpod - Get Bonus Credits • AdSkip the infrastructure headaches. Auto-scaling, pay-as-you-go, no-ops approach lets you focus on innovating your application.
- Nmap Script to scan for Winnti infections☆71May 22, 2018Updated 8 years ago
- A collection of threat intelligence data such as IOC, Yara and Snort/Suricata Rules etc.☆10Sep 17, 2019Updated 6 years ago
- Elasticsearch/Kibana environment and log data for Sigma workshop☆27Dec 20, 2019Updated 6 years ago
- Attack Tool Timing and Reporting - Structured Attack Logging Format☆22Nov 4, 2022Updated 3 years ago
- ☆12Nov 3, 2020Updated 5 years ago
- Multicore EVTX to Elasticsearch ingestor for incident responders.☆14May 12, 2021Updated 5 years ago
- A boundle of useful scripts☆20Apr 21, 2026Updated 3 months ago
- Trace ScriptBlock execution for powershell v2☆40Jan 14, 2020Updated 6 years ago
- Synthesising graphs and simulating things☆10Oct 25, 2022Updated 3 years ago
- 1-Click AI Models by DigitalOcean Gradient • AdDeploy popular AI models on DigitalOcean Gradient GPU virtual machines with just a single click. Zero configuration with optimized deployments.
- Basic command line, text-based, shellcode debugger.☆93Jul 2, 2017Updated 9 years ago
- Carving tool based in Radare2 & Yara☆17Oct 30, 2018Updated 7 years ago
- ☆136Jan 24, 2019Updated 7 years ago
- Binary String Toolkit (BST). Quickly and easily convert binary strings for all your exploit development needs.☆22Jul 27, 2018Updated 8 years ago
- Threat Alert Logic Repository☆93Feb 7, 2019Updated 7 years ago
- Encase Script to parse harddrive for MFT data☆16Jun 17, 2016Updated 10 years ago
- Various short scripts and tools used for Digital Forensics☆14Jul 9, 2026Updated 2 weeks ago
- Simple shellcode decoder using unicorn-engine☆101Oct 17, 2015Updated 10 years ago
- ☆12Sep 4, 2013Updated 12 years ago
- Wordpress hosting with auto-scaling - Free Trial Offer • AdFully Managed hosting for WordPress and WooCommerce businesses that need reliable, auto-scalable performance. Cloudways SafeUpdates now available.
- A simple guideline for MacOs Security.☆13Jun 15, 2022Updated 4 years ago
- NSRL BloomFilter, Mandiant BloomFilter, Hyperloglog Malware Data Structure☆15Mar 14, 2014Updated 12 years ago
- A PowerShell module for creating and removing Loopback Network Adapters on Windows using Device Conslole (DevCon.exe)☆15Feb 26, 2021Updated 5 years ago
- Burp plugin that clusters responses to show an overview of received responses☆15Jun 7, 2019Updated 7 years ago
- A C# Tool to gather information about email breaches☆17Dec 21, 2023Updated 2 years ago
- Static unpacker for FinSpy VM☆103Jul 11, 2021Updated 5 years ago
- An advanced Twitter scraping & OSINT tool written in Python that doesn't use Twitter's API, allowing you to scrape a user's followers, fo…☆13Aug 19, 2022Updated 3 years ago
- Various public documents, whitepapers and articles about APT campaigns☆55Apr 1, 2016Updated 10 years ago
- Historical Observations of Actionable Reputation Data☆13Jun 26, 2018Updated 8 years ago
- Deploy to Railway using AI coding agents - Free Credits Offer • AdUse Claude Code, Codex, OpenCode, and more. Autonomous software development now has the infrastructure to match with Railway.
- Visual Basic GUI: A Tool to Inject Keystrokes on a SSH Client via an X11 Forwarded Session☆63Mar 13, 2018Updated 8 years ago
- GCNotify is an Outlook addin for quickly forwarding mail as attachment to a pre-defined e-mail address.☆12Jan 17, 2023Updated 3 years ago
- Simple yara decompiler☆17Apr 8, 2017Updated 9 years ago
- A browser extension that seamlessly integrates your yara match notifications into VirusTotal Intelligence.☆17Feb 8, 2015Updated 11 years ago
- Splunk Technology Add-On (TA) for collecting ETW events from Windows systems☆16Dec 8, 2022Updated 3 years ago
- Code and Slides of my BSides London 2019 presentation about Attacker Emulation using CALDERA☆22Jun 9, 2019Updated 7 years ago
- bridge for Philips Hue to MQTT, written in Go☆11Jul 18, 2023Updated 3 years ago