dfir-dd / dionysosLinks
Scanner for certain IoCs
☆11Updated 9 months ago
Alternatives and similar repositories for dionysos
Users that are interested in dionysos are comparing it to the libraries listed below
Sorting:
- Manage Your Large Team of Consultants☆11Updated last month
- NTFS Security Descriptor Stream ($Secure:$SDS) parser☆14Updated 2 years ago
- lnk_parser is a full rust implementation to parse windows LNK files☆20Updated 3 months ago
- Yara rules for malicious javascript files from public repositories or written by me.☆13Updated 3 years ago
- 100 Days of YARA to be updated with rules & ideas as the year progresses☆60Updated 2 years ago
- Hundred Days of Yara Challenge☆12Updated 3 years ago
- Alternative YARA scanning engine☆72Updated 3 years ago
- A document tagging library☆30Updated 7 months ago
- Provides a multi-platform Graphical User Interface for hashlookup☆12Updated last year
- ☆23Updated 7 months ago
- Modular malware analysis artifact collection and correlation framework☆53Updated last year
- ☆36Updated 2 years ago
- ShellSweeping the evil.☆53Updated last year
- Windows file metadata / forensic tool.☆18Updated 3 weeks ago
- Maco - Malware config extractor framework☆41Updated 3 weeks ago
- ☆23Updated last year
- NTFS file system specimens☆13Updated 2 years ago
- Threat Feeds, Threat lists, and regular lists of known IP ranges and domains. It updates every 4 hours.☆16Updated 4 years ago
- Repository with selected IOCs and YARA rules for threat hunting.☆35Updated 5 months ago
- Script for parsing Symantec Endpoint Protection logs, VBNs, and ccSubSDK database.☆64Updated 2 years ago
- Factual-rules-generator is an open source project which aims to generate YARA rules about installed software from a machine.☆76Updated 3 years ago
- Python based CLI for MalwareBazaar☆38Updated 3 months ago
- Repository of tools, YARA rules, and code-snippets from Stairwell's research team.☆23Updated last year
- ☆23Updated 2 years ago
- A small util to brute-force prefetch hashes☆78Updated 3 years ago
- ☆33Updated 3 years ago
- Links to malware-related YARA rules☆15Updated 3 years ago
- Wrapper for TSK (Sleuth Kit) Bindings☆12Updated 2 years ago
- ☆17Updated this week
- RustHunter is a modular incident response framework based on Rust and Ansible to build and compare environmental baselines.☆18Updated 3 years ago