Alternatives and similar repositories for defender2yara

Users that are interested in defender2yara are comparing it to the libraries listed below

• EspressoCake / ReadRemoteProcessCommandline_BOF
  ☆29Updated last year
• weaselsec / ClickOnce-AppDomain-Manager-Injection
  Click Once + App Domain
  ☆64Updated 2 years ago
• snovvcrash / BOFs
  Beacon Object Files (not Buffer Overflows)
  ☆57Updated 2 years ago
• EspressoCake / BOF_NativeAPI_Definitions-VSCode
  A VSCode plugin to assist with BOF development.
  ☆37Updated last year
• Hagrid29 / BOF-CredUI
  Cobalt Strike Beacon Object File (BOF) that uses CredUIPromptForWindowsCredentials API to invoke credential prompt
  ☆23Updated 3 years ago
• ausec-it / bof-registry
  Cobalt Strike beacon object file that allows you to query and make changes to the Windows Registry
  ☆30Updated 4 years ago
• ZephrFish / DynamicMSBuilder
  A Dynamic MSBuild task to help with minor obfuscation of C# Binaries to evade static signatures on each compilation
  ☆37Updated last month
• eladshamir / BadWindowsService
  An insecurely implemented and installed Windows service for emulating elevation of privileges vulnerabilities
  ☆63Updated 3 years ago
• susMdT / AceLdr
  Cobalt Strike UDRL for memory scanner evasion.
  ☆52Updated 2 years ago
• artemy-ccrsky / DecryptRecoveryLAPS_RPC
  A way to maintain long-term access to Windows LAPS for lateral movement in AD via installing an Offensive LAPS RPC backdoor on a DC.
  ☆28Updated 7 months ago
• brett-fitz / pyMalleableProfileParser
  Parses Cobalt Strike malleable C2 profiles.
  ☆60Updated last week
• FalconForceTeam / bof-winrm-plugin-jump
  ☆32Updated 11 months ago
• jsecu / BOF-pack-1
  A care package of useful bofs for red team engagments
  ☆55Updated last year
• Wh04m1001 / PICDumper
  ☆26Updated 3 years ago
• d4rkiZ / EmbedExeLnk-
  EmbedExeLnk by x86matthew modified by d4rkiZ
  ☆42Updated 2 years ago
• guervild / InlineZipper
  ☆25Updated 3 years ago
• NocteDefensor / SCCMDecryptor-BOF
  ☆51Updated 6 months ago
• cybersectroll / TrollRPC
  ☆50Updated 6 months ago
• Allevon412 / SyscallTempering
  ☆30Updated last year
• decoder-it / NewMachineAccount
  ☆38Updated 10 months ago
• Teach2Breach / phantom_persist_rs
  Rust implementation of phantom persistence technique documented in https://blog.phantomsec.tools/phantom-persistence
  ☆62Updated 6 months ago
• rkbennett / pybof
  Python module for running BOFs
  ☆79Updated last month
• antroguy / GetAccessTokenWithSSOCookie
  ☆49Updated 7 months ago
• X-C3LL / SharpNTLMRawUnHide
  C# version of NTLMRawUnHide
  ☆72Updated 3 years ago
• KingOfTheNOPs / EnableWebDAVClient-BOF
  Cobalt Strike Beacon Object File to enable the webdav client service on x64 windows hosts
  ☆23Updated 2 years ago
• fin3ss3g0d / IoDllProxyLoad
  DLL proxy load example using the Windows thread pool API, I/O completion callback with named pipes, and C++/assembly
  ☆62Updated last year
• rasta-mouse / KerbApp
  ☆32Updated last year
• slemire / bof-adopt
  BOF implementation of Adopt. Spawns a process from a process. Can sometimes be used to run a session > 0 process from session 0.
  ☆17Updated 3 years ago
• Quack2332 / Simple-.NET-Obfuscator-PoC
  ☆24Updated last year
• jsecu / ElevatedEvents
  ☆30Updated 3 years ago