Alternatives and similar repositories for procfilter

Users that are interested in procfilter are comparing it to the libraries listed below

• mandiant / flare-wmi
  ☆428Updated 2 years ago
• mandiant / ShimCacheParser
  ☆278Updated 2 years ago
• spender-sandbox / cuckoo-modified
  Modified edition of cuckoo
  ☆402Updated 7 years ago
• mkorman90 / VolatilityBot
  VolatilityBot – An automated memory analyzer for malware samples and memory dumps
  ☆270Updated 4 years ago
• felixweyne / ProcessSpawnControl
  Process Spawn Control is a Powershell tool which aims to help in the behavioral (process) analysis of malware. PsC suspends newly launche…
  ☆264Updated 3 years ago
• marcosd4h / sysmonx
  SysmonX - An Augmented Drop-In Replacement of Sysmon
  ☆215Updated 5 years ago
• Xen0ph0n / YaraGenerator
  Automatic Yara Rule Generation
  ☆335Updated 9 years ago
• williballenthin / process-forest
  Reconstruct process trees from event logs
  ☆147Updated 5 years ago
• hatching / vmcloak
  Automated Virtual Machine Generation and Cloaking for Cuckoo Sandbox.
  ☆506Updated last year
• brad-sp / cuckoo-modified
  Modified edition of cuckoo
  ☆270Updated 6 years ago
• egaus / MaliciousMacroBot
  ☆152Updated 6 years ago
• gleeda / memtriage
  Allows you to quickly query a Windows machine for RAM artifacts
  ☆220Updated 5 years ago
• marcosd4h / memhunter
  Live hunting of code injection techniques
  ☆383Updated 6 years ago
• JPCERTCC / aa-tools
  Artifact analysis tools by JPCERT/CC Analysis Center
  ☆463Updated last month
• joesecurity / pafishmacro
  Pafish Macro is a Macro enabled Office Document to detect malware analysis systems and sandboxes. It uses evasion & detection techniques …
  ☆290Updated 8 years ago
• ctxis / CAPE
  Malware Configuration And Payload Extraction
  ☆761Updated 9 months ago
• SupportIntelligence / Icewater
  16,432 Free Yara rules created by
  ☆387Updated 6 years ago
• JohnLaTwC / PyPowerShellXray
  Python script to decode common encoded PowerShell scripts
  ☆216Updated 7 years ago
• mitre / multiscanner
  Modular file scanning/analysis framework
  ☆621Updated 5 years ago
• fireeye / pywintrace
  ETW Python Library
  ☆290Updated 2 years ago
• BayshoreNetworks / yextend
  Yara integrated software to handle archive file data.
  ☆317Updated 3 years ago
• hasherezade / malware_analysis
  Various snippets created during malware analysis
  ☆456Updated last week
• SekoiaLab / Fastir_Collector
  ☆518Updated 4 years ago
• libyal / libevtx
  Library and tools to access the Windows XML Event Log (EVTX) format
  ☆213Updated 11 months ago
• monnappa22 / HollowFind
  Hollowfind is a Volatility plugin to detect different types of process hollowing techniques used in the wild to bypass, confuse, deflect …
  ☆139Updated 2 years ago
• therealdreg / anticuckoo
  A tool to detect and crash Cuckoo Sandbox
  ☆295Updated last year
• mikesxrs / Open-Source-YARA-rules
  YARA Rules I come across on the internet
  ☆349Updated last year
• mandiant / iocs
  FireEye Publicly Shared Indicators of Compromise (IOCs)
  ☆469Updated 6 years ago
• EmersonElectricCo / fsf
  File Scanning Framework
  ☆293Updated 4 years ago
• mandiant / ioc_writer
  ☆205Updated 2 years ago