Alternatives and similar repositories for tooling-playground

Users that are interested in tooling-playground are comparing it to the libraries listed below

• knight0x07 / OneNoteAnalyzer
  A C# based tool for analysing malicious OneNote documents
  ☆114Updated 2 years ago
• kacos2000 / Prefetch-Browser
  Browse Windows Prefetch versions: 17,23,26,30v1/2,31 & some of SuperFetch .7db/.db's
  ☆62Updated 6 months ago
• hackerhouse-opensource / WMIProcessWatcher
  A CIA tradecraft technique to asynchronously detect when a process is created using WMI.
  ☆135Updated last year
• naacbin / CovenantDecryptor
  ☆20Updated last year
• MalwareTech / HiddenDesktop
  Create and enumerate hidden desktops.
  ☆90Updated last year
• jaredcatkinson / MalwareMorphology
  ☆81Updated 7 months ago
• nasbench / Misc-Research
  A collection of tools, scripts and personal research
  ☆138Updated 2 weeks ago
• jonny-jhnson / PowerParse
  PowerShell PE Parser
  ☆63Updated last year
• embee-research / Yara-detection-rules
  Yara Rules for Modern Malware
  ☆77Updated last year
• rtfmkiesel / loldrivers-client
  Scan your computer for known vulnerable and known malicious Windows drivers using loldrivers.io
  ☆83Updated last year
• olafhartong / PockETWatcher
  a tiny program to consume from ETW providers for research
  ☆49Updated 6 months ago
• RussianPanda95 / Configuration_extractors
  Configuration Extractors for Malware
  ☆108Updated 2 months ago
• SafeBreach-Labs / aikido_wiper
  ☆67Updated 2 years ago
• dodo-sec / Malware-Analysis
  ☆136Updated 2 years ago
• dr4k0nia / yara-rules
  A collection of my yara rules
  ☆34Updated 2 years ago
• ashemery / Anti-Forensics
  A Repository to Track Anti-Forensic Techniques
  ☆110Updated 2 years ago
• QueenSquishy / plague
  Default Detections for EDR
  ☆96Updated last year
• cbecks2 / edr-artifacts
  This repository is meant to catalog network and host artifacts associated with various EDR products "shell" and response functionalities.
  ☆81Updated 10 months ago
• sensepost / mydumbedr
  ☆119Updated last year
• patrickmatula / Windows-Internals-Learning-Resources
  ☆102Updated 7 months ago
• SafeBreach-Labs / DoubleDrive
  A fully-undetectable ransomware that utilizes OneDrive & Google Drive to encrypt target local files
  ☆125Updated last year
• alwashali / detection-validation
  Detection rule validation
  ☆41Updated last year
• DISREL / Conti-Leaked-Playbook-TTPs
  MITRE TTPs derived from Conti's leaked playbooks from XSS.IS
  ☆38Updated 3 years ago
• DebugPrivilege / OpenProject
  A practical resource on using open-source tools for Incident Response. This repo shares workflows, tool setups, and steps for responding …
  ☆34Updated 8 months ago
• vc0RExor / Malware-Threat-Reports
  A full analysis report detailing as much as possible of a Malware or a Threat
  ☆30Updated last year
• forensicxlab / VISION-ProcMon
  A ProcessMonitor visualization application written in rust.
  ☆181Updated last year
• georgesotiriadis / MalwareDev
  ☆85Updated 2 years ago
• xg5-simon / MS-Graph-BlueTeam
  MS Graph Commands and Tools for Blue Teamers
  ☆50Updated last year
• ArtemBaranov / WindowsRootkitsGuide
  ☆67Updated 5 months ago
• S3N4T0R-0X0 / APT28-Adversary-Simulation
  This is a simulation of attack by Fancy Bear group (APT28) targeting high-ranking government officials Western Asia and Eastern Europe
  ☆34Updated last year