Alternatives and similar repositories for fame_modules:

Users that are interested in fame_modules are comparing it to the libraries listed below

• YahooArchive / PyIOCe
  Python IOC Editor
  ☆62Updated 10 years ago
• airbus-cert / Splunk-ETW
  A Splunk Technology Add-on to forward filtered ETW events.
  ☆30Updated 4 years ago
• Silv3rHorn / ArtifactExtractor
  Extract common Windows artifacts from source images and VSCs
  ☆65Updated 3 years ago
• kevthehermit / YaraManager
  Web based Manager for Yara Rules
  ☆57Updated 5 years ago
• Neo23x0 / panopticon
  A YARA Rule Performance Measurement Tool
  ☆59Updated last year
• sbousseaden / YaraHunts
  Random hunting ordiented yara rules
  ☆95Updated 2 years ago
• DissectMalware / base64_substring
  Generate a Yara rule to find base64-encoded files containg a specific keyword
  ☆40Updated 6 years ago
• ANSSI-FR / bits_parser
  Extract BITS jobs from QMGR queue and store them as CSV records
  ☆75Updated 2 months ago
• W3ndige / aurora
  Malware similarity platform with modularity in mind.
  ☆78Updated 3 years ago
• EmergingThreats / threatresearch
  Proofpoint - Emerging Threats - Threat Research tools + publicly shared intel and documentation
  ☆72Updated 4 months ago
• csababarta / volatility_plugins
  Volatility plugins created by the author
  ☆44Updated 9 years ago
• certtools / malware_name_mapping
  A mapping of used malware names to commonly known family names
  ☆62Updated 2 years ago
• giMini / NOAH
  PowerShell No Agent Hunting
  ☆110Updated 7 years ago
• 3c7 / yaramanager
  Simple yara rule manager
  ☆66Updated 2 years ago
• Yara-Rules / yara-endpoint
  Yara-Endpoint is a tool useful for incident response as well as anti-malware enpoint base on Yara signatures.
  ☆108Updated 7 years ago
• MISP / mail_to_misp
  Connect your mail client/infrastructure to MISP in order to create events based on the information contained within mails.
  ☆69Updated last year
• IllusiveNetworks-Labs / HistoricProcessTree
  An Incident Response tool that visualizes historic process execution evidence (based on Event ID 4688 - Process Creation Event) in a tree…
  ☆60Updated 7 years ago
• msuhanov / yarp
  Yet another registry parser
  ☆132Updated 3 years ago
• jeFF0Falltrades / YARA-Signatures
  A collection of my public YARA signatures for various malware families
  ☆29Updated 7 months ago
• mandiant / Volatility-Plugins
  ☆82Updated 8 years ago
• airbus-cert / timeliner
  A rewrite of mactime, a bodyfile reader
  ☆37Updated 8 months ago
• Neo23x0 / ImpHash-Generator
  PE Import Hash Generator
  ☆78Updated 7 years ago
• devgc / EventMonkey
  A Windows Event Processing Utility
  ☆46Updated 7 years ago
• REMnux / salt-states
  This repository maintains the SaltStack state files for the REMnux distro.
  ☆45Updated last month
• bromiley / pollen
  pollen - A command-line tool for interacting with TheHive
  ☆35Updated 5 years ago
• Neo23x0 / exotron
  Sandbox feature upgrade with the help of wrapped samples
  ☆76Updated 6 years ago
• Jrotenberger / Powershell-IR-Scripts
  ☆39Updated 5 years ago
• deadbits / yara-rules
  Collection of YARA signatures from individual research
  ☆44Updated last year
• ctxis / cbrcli
  Command line interface to Carbon Black Response
  ☆38Updated 4 years ago
• Foundstone / InvestigationPlaybookSpec
  InvestigationPlaybookSpec
  ☆72Updated 7 years ago