forensicxlab / VISION-ProcMon
A ProcessMonitor visualization application written in rust.
☆175Updated last year
Related projects: ⓘ
- Collect-MemoryDump - Automated Creation of Windows Memory Snapshots for DFIR☆216Updated 6 months ago
- A C# based tool for analysing malicious OneNote documents☆108Updated last year
- ☆168Updated 8 months ago
- Python tool to check rootkits in Windows kernel☆164Updated last month
- Repository of Yara Rules☆83Updated last week
- A collection of tools, scripts and personal research☆104Updated 2 months ago
- ☆154Updated last month
- ☆214Updated 4 months ago
- ☆131Updated last year
- Chocolatey packages supporting the analysis environment projects FLARE-VM & Commando VM.☆138Updated this week
- MSI Dump - a tool that analyzes malicious MSI installation packages, extracts files, streams, binary data and incorporates YARA scanner.☆190Updated last year
- PowerDecode is a PowerShell-based tool that allows to deobfuscate PowerShell scripts obfuscated across multiple layers. The tool performs…☆147Updated 4 months ago
- ☆181Updated 7 months ago
- A collection of tools and detections for the Sliver C2 Frameworj☆104Updated last year
- Active C&C Detector☆148Updated 11 months ago
- ☆290Updated last year
- Repository to publish your evasion techniques and contribute to the project☆128Updated 2 weeks ago
- A small program written in C that is designed to load 32/64-bit shellcode and allow for execution or debugging. Can also output PE files …☆121Updated last month
- A YARA rules repository continuously updated for monitoring the old and new threats from articles, incidents responses ...☆136Updated 10 months ago
- A suite of tools to disrupt campaigns using the Sliver C2 framework.☆245Updated last year
- ☆145Updated last year
- Rules shared by the community from 100 Days of YARA 2024☆75Updated 5 months ago
- Tools for analyzing EDR agents☆200Updated 3 months ago
- Free training course offered at Hack Space Con 2023☆131Updated last year
- The Windows Malware Analysis Reversing Core Tools☆88Updated 3 years ago
- ☆63Updated last year
- ☆150Updated 4 months ago
- ☆103Updated last month
- ☆153Updated 9 months ago
- Scan vulnerable drivers on Windows with loldrivers.io☆162Updated last year