Alternatives and similar repositories for CyberChef:

Users that are interested in CyberChef are comparing it to the libraries listed below

• woanware / etw-event-dumper
  ☆33Updated 3 years ago
• kacos2000 / Prefetch-Browser
  Browse Windows Prefetch versions: 17,23,26,30v1/2,31 & some of SuperFetch .7db/.db's
  ☆61Updated 4 months ago
• mdecrevoisier / Windows-authentication-brutforce-cheatsheet
  Assist analyst and threat hunters to understand Windows authentication logs and to analyze brutforce scenarios.
  ☆18Updated last year
• fr0gger / MalwareMuncher
  Malware Muncher is a proof-of-concept Python script that utilizes the Frida framework for binary instrumentation and API hooking, enablin…
  ☆44Updated 2 years ago
• dr4k0nia / yara-rules
  A collection of my yara rules
  ☆35Updated last year
• cod3nym / detection-rules
  Collection of my own detection rules
  ☆20Updated last year
• RomaissaAdjailia / Get-AppLockerEventlog
  This is a repo for fetching Applocker event log by parsing the win-event log
  ☆30Updated 2 years ago
• olafhartong / PockETWatcher
  a tiny program to consume from ETW providers for research
  ☆47Updated 3 months ago
• GDATAAdvancedAnalytics / winreg-tasks
  ☆19Updated 2 years ago
• ACE-Responder / rpcfirewall-extended-telemetry
  ☆14Updated 11 months ago
• 0xThiebaut / PCAPeek
  A proof-of-concept re-assembler for reverse VNC traffic.
  ☆25Updated last year
• kacos2000 / Jumplist-Browser
  Automatic/Custom Destinations & LNK (MS-SHLLINK) Browser
  ☆32Updated last year
• QueenSquishy / Zombie
  General Content
  ☆26Updated 9 months ago
• jsecurity101 / LDAPMon
  ☆45Updated last year
• SygniaLabs / BackupKeyManager
  ☆12Updated 9 months ago
• dwmetz / Mal-Hash
  This script will generate hashes (MD5, SHA1, SHA256), submit the MD5 to Virus Total, and produce a text file with the results.
  ☆15Updated last year
• dr4k0nia / tooling-playground
  A collection of small scripts and tools for deobfuscation and malware analysis.
  ☆66Updated 2 years ago
• Retrospected / PurpleKeep
  Providing Azure pipelines to create an infrastructure and run Atomic tests.
  ☆51Updated last year
• nmantani / PS-TrustedDocuments
  PS-TrustedDocuments: PowerShell script to handle information on trusted documents for Microsoft Office
  ☆35Updated 2 years ago
• reecdeep / hollowise
  Hollowise is a tool that implements process hollowing and PPID (Parent Process ID) spoofing techniques for masking a legitimate analysis …
  ☆36Updated 2 months ago
• AmirHoseinTangsiriNET / EventLogSilencer
  EventLogSilencer is a PowerShell script designed for disable Windows Event Logging
  ☆16Updated last year
• randomaccess3 / block-parser
  Parser for Windows PowerShell script block logs
  ☆13Updated 3 months ago
• jsecurity101 / MSFT_DriverBlockList
  Repository of Microsoft Driver Block Lists based off of OS-builds
  ☆39Updated last year
• FarghlyMal / Config-Extractors
  ☆27Updated 5 months ago
• mttaggart / quasar
  quASAR: ASAR manipulation made easy
  ☆37Updated 2 years ago
• rbmm / Services
  ☆18Updated 3 months ago
• brokensound77 / LoFP
  Living off the False Positive!
  ☆35Updated 2 months ago
• huntresslabs / threat-intel
  This repository contains supplemental items including IOCs, and signatures discussed in Huntress blogposts, and other media.
  ☆36Updated 2 weeks ago
• BinaryDefense / YaraMemoryScanner
  Simple PowerShell script to enable process scanning with Yara.
  ☆93Updated 2 years ago
• herosi / triage-collector
  ☆22Updated 6 months ago