celyrin / cape-dockerLinks
Quickly deploy CAPEv2 Sandbox service in Docker
☆19Updated last year
Alternatives and similar repositories for cape-docker
Users that are interested in cape-docker are comparing it to the libraries listed below
Sorting:
- Living Off The Land Drivers☆1,386Updated this week
- Collection of Linux and macOS Volatility3 Intermediate Symbol Files (ISF), suitable for memory analysis 🔍☆259Updated 3 weeks ago
- BYOVD research use cases featuring vulnerable driver discovery and reverse engineering methodology. (CVE-2025-52915, CVE-2025-1055,).☆547Updated 3 months ago
- Centralized resource for listing and organizing known injection techniques and POCs☆673Updated last week
- SHAREM is a shellcode analysis framework, capable of emulating more than 20,000 WinAPIs and virutally all Windows syscalls. It also conta…☆478Updated 7 months ago
- A set of fully-undetectable process injection techniques abusing Windows Thread Pools☆1,243Updated 2 years ago
- Cybersecurity research results. Simple C/C++ and Python implementations☆290Updated last week
- CAPE core and community parsers☆18Updated this week
- MemProcFS-Analyzer - Automated Forensic Analysis of Windows Memory Dumps for DFIR☆693Updated 3 months ago
- Unprotect is a collaborative platform dedicated to uncovering and documenting malware evasion techniques. We invite you to join us in thi…☆203Updated 4 months ago
- Dynamic unpacker based on PE-sieve☆796Updated 4 months ago
- Extracted Yara rules from Windows Defender mpavbase and mpasbase☆492Updated last month
- Important notes and topics on my journey towards mastering Windows Internals☆426Updated last year
- ☆391Updated 7 months ago
- A PowerShell script that attempts to help malware analysts hide their VMware Windows VM's from malware that may be trying to evade analys…☆425Updated last year
- Collect Windows telemetry for Maldev☆455Updated last week
- Experimental Windows x64 Kernel Rootkit with anti-rootkit evasion features.☆587Updated 6 months ago
- Sanctum is an experimental proof-of-concept EDR, designed to detect modern malware techniques, above and beyond the capabilities of antiv…☆498Updated this week
- Assortment of hashing algorithms used in malware☆389Updated 3 weeks ago
- A centralized and enhanced memory analysis platform☆517Updated 6 months ago
- EDR Lab for Experimentation Purposes☆1,409Updated 2 weeks ago
- [MAF - Malware Analysis Feed] This repository aim to collect useful scripts and rules for the detection of malware families analyzed by Z…☆23Updated last year
- A utility for playing with cryptography, geared towards ransomware analysis.☆318Updated 5 months ago
- The multi-platform memory acquisition tool.☆942Updated 3 months ago
- Go symbol recovery tool☆912Updated 3 weeks ago
- Collection of Volatility2 profiles, generated against Linux kernels.☆54Updated 3 months ago
- Some of my publicly available Malware analysis and Reverse engineering.☆929Updated last year
- Shoggoth: Asmjit Based Polymorphic Encryptor☆778Updated last year
- Handbook of windows forensic artifacts across multiple Windows version with interpretation tips and some examples. Work in progress!☆458Updated last year
- Reports in .MD format☆21Updated 7 months ago