Alternatives and similar repositories for procfilter:

Users that are interested in procfilter are comparing it to the libraries listed below

• mandiant / flare-wmi
  ☆426Updated last year
• spender-sandbox / cuckoo-modified
  Modified edition of cuckoo
  ☆396Updated 7 years ago
• mkorman90 / VolatilityBot
  VolatilityBot – An automated memory analyzer for malware samples and memory dumps
  ☆264Updated 3 years ago
• brad-sp / cuckoo-modified
  Modified edition of cuckoo
  ☆270Updated 5 years ago
• mandiant / ShimCacheParser
  ☆275Updated last year
• marcosd4h / sysmonx
  SysmonX - An Augmented Drop-In Replacement of Sysmon
  ☆214Updated 5 years ago
• ctxis / CAPE
  Malware Configuration And Payload Extraction
  ☆752Updated 3 months ago
• gleeda / memtriage
  Allows you to quickly query a Windows machine for RAM artifacts
  ☆219Updated 4 years ago
• Xen0ph0n / YaraGenerator
  Automatic Yara Rule Generation
  ☆332Updated 9 years ago
• EmersonElectricCo / fsf
  File Scanning Framework
  ☆291Updated 3 years ago
• mitre / multiscanner
  Modular file scanning/analysis framework
  ☆620Updated 5 years ago
• JohnLaTwC / PyPowerShellXray
  Python script to decode common encoded PowerShell scripts
  ☆216Updated 6 years ago
• williballenthin / process-forest
  Reconstruct process trees from event logs
  ☆147Updated 4 years ago
• felixweyne / ProcessSpawnControl
  Process Spawn Control is a Powershell tool which aims to help in the behavioral (process) analysis of malware. PsC suspends newly launche…
  ☆261Updated 3 years ago
• SupportIntelligence / Icewater
  16,432 Free Yara rules created by
  ☆383Updated 5 years ago
• SekoiaLab / Fastir_Collector
  ☆507Updated 4 years ago
• buguroo / cuckooautoinstall
  Auto Installer Script for Cuckoo Sandbox
  ☆165Updated 6 years ago
• BayshoreNetworks / yextend
  Yara integrated software to handle archive file data.
  ☆305Updated 2 years ago
• endgameinc / eqllib
  ☆160Updated 4 years ago
• 0x4D31 / deception-as-detection
  Deception based detection techniques mapped to the MITRE’s ATT&CK framework
  ☆289Updated 7 years ago
• JPCERTCC / aa-tools
  Artifact analysis tools by JPCERT/CC Analysis Center
  ☆458Updated 8 months ago
• OMENScan / AChoir
  Windows Live Artifacts Acquisition Script
  ☆186Updated 2 years ago
• cuckoosandbox / community
  Repository of modules and signatures contributed by the community
  ☆326Updated 2 years ago
• JamesHabben / evolve
  Web interface for the Volatility Memory Forensics Framework
  ☆259Updated 7 years ago
• joesecurity / pafishmacro
  Pafish Macro is a Macro enabled Office Document to detect malware analysis systems and sandboxes. It uses evasion & detection techniques …
  ☆281Updated 7 years ago
• therealdreg / anticuckoo
  A tool to detect and crash Cuckoo Sandbox
  ☆292Updated 7 months ago
• H2Cyber / VolDiff
  VolDiff: Malware Memory Footprint Analysis based on Volatility
  ☆194Updated 7 years ago
• chenerlich / FCL
  FCL (Fileless Command Lines) - Known command lines of fileless malicious executions
  ☆466Updated 3 years ago
• mikesxrs / Open-Source-YARA-rules
  YARA Rules I come across on the internet
  ☆335Updated 10 months ago
• fireeye / pywintrace
  ETW Python Library
  ☆276Updated last year