Alternatives and similar repositories for VBoxCloak:

Users that are interested in VBoxCloak are comparing it to the libraries listed below

• d4rksystem / VMwareCloak
  A PowerShell script that attempts to help malware analysts hide their VMware Windows VM's from malware that may be trying to evade analys…
  ☆340Updated 2 months ago
• Unprotect-Project / Unprotect_Submission
  Unprotect is a collaborative platform dedicated to uncovering and documenting malware evasion techniques. We invite you to join us in thi…
  ☆158Updated this week
• hasherezade / mal_unpack
  Dynamic unpacker based on PE-sieve
  ☆718Updated 2 weeks ago
• DissectMalware / batch_deobfuscator
  Deobfuscate batch scripts obfuscated using string substitution and escape character techniques.
  ☆157Updated 2 years ago
• forrest-orr / moneta
  Moneta is a live usermode memory analysis tool for Windows with the capability to detect malware IOCs
  ☆736Updated last year
• mandiant / VM-Packages
  Chocolatey packages supporting the analysis environment projects FLARE-VM & Commando VM.
  ☆171Updated last week
• forensicxlab / VISION-ProcMon
  A ProcessMonitor visualization application written in rust.
  ☆177Updated last year
• PhrozenIO / DLest
  Microsoft Windows DLL Export Browser (Enumerate Exports, COM Methods and Properties) with Advanced Search Features.
  ☆216Updated 9 months ago
• Malandrone / PowerDecode
  PowerDecode is a PowerShell-based tool that allows to deobfuscate PowerShell scripts obfuscated across multiple layers. The tool performs…
  ☆178Updated 11 months ago
• magicsword-io / LOLDrivers
  Living Off The Land Drivers
  ☆1,140Updated last week
• advanced-threat-research / DotDumper
  An automatic unpacker and logger for DotNet Framework targeting files
  ☆252Updated last year
• Squiblydoo / debloat
  A GUI and CLI tool for removing bloat from executables
  ☆390Updated 2 months ago
• Karneades / malware-persistence
  Collection of malware persistence and hunting information. Be a persistent persistence hunter!
  ☆175Updated 2 months ago
• persistence-info / persistence-info.github.io
  ☆488Updated last year
• CERT-Polska / malduck
  Malduck is your ducky companion in malware analysis journeys
  ☆326Updated 9 months ago
• daem0nc0re / TangledWinExec
  PoCs and tools for investigation of Windows process execution techniques
  ☆912Updated 2 weeks ago
• DissectMalware / XLMMacroDeobfuscator
  Extract and Deobfuscate XLM macros (a.k.a Excel 4.0 Macros)
  ☆577Updated 10 months ago
• Bw3ll / sharem
  SHAREM is a shellcode analysis framework, capable of emulating more than 20,000 WinAPIs and virutally all Windows syscalls. It also conta…
  ☆387Updated 2 weeks ago
• RussianPanda95 / Yara-Rules
  Repository of Yara Rules
  ☆103Updated last month
• wietze / HijackLibs
  Project for tracking publicly disclosed DLL Hijacking opportunities.
  ☆731Updated 2 weeks ago
• XaFF-XaFF / Black-Angel-Rootkit
  Black Angel is a Windows 11/10 x64 kernel mode rootkit. Rootkit can be loaded with enabled DSE while maintaining its full functionality.
  ☆638Updated last year
• gtworek / VolatileDataCollector
  ☆200Updated 5 months ago
• EricZimmerman / LECmd
  Lnk Explorer Command line edition!!
  ☆295Updated 2 months ago
• Karneades / awesome-malware-persistence
  A curated list of awesome malware persistence tools and resources.
  ☆205Updated 4 months ago
• Velocidex / WinPmem
  The multi-platform memory acquisition tool.
  ☆766Updated 4 months ago
• LETHAL-FORENSICS / Collect-MemoryDump
  Collect-MemoryDump - Automated Creation of Windows Memory Snapshots for DFIR
  ☆236Updated this week
• OALabs / hashdb
  Assortment of hashing algorithms used in malware
  ☆352Updated 3 weeks ago
• hasherezade / process_ghosting
  Process Ghosting - a PE injection technique, similar to Process Doppelgänging, but using a delete-pending file instead of a transacted fi…
  ☆652Updated last year
• Faran-17 / Windows-Internals
  Important notes and topics on my journey towards mastering Windows Internals
  ☆374Updated 11 months ago
• struppigel / hedgehog-tools
  ☆113Updated last month