Alternatives and similar repositories for PowerParse:

Users that are interested in PowerParse are comparing it to the libraries listed below

• olafhartong / PockETWatcher
  a tiny program to consume from ETW providers for research
  ☆46Updated 3 weeks ago
• dr4k0nia / tooling-playground
  A collection of small scripts and tools for deobfuscation and malware analysis.
  ☆65Updated last year
• kacos2000 / Prefetch-Browser
  Browse Windows Prefetch versions: 17,23,26,30v1/2,31 & some of SuperFetch .7db/.db's
  ☆59Updated last month
• embee-research / Yara-detection-rules
  Yara Rules for Modern Malware
  ☆73Updated 10 months ago
• cbecks2 / edr-artifacts
  This repository is meant to catalog network and host artifacts associated with various EDR products "shell" and response functionalities.
  ☆75Updated 5 months ago
• jsecurity101 / ETWInspector
  ☆155Updated 8 months ago
• OtterHacker / Hooker
  ☆104Updated 3 months ago
• mttaggart / quasar
  quASAR: ASAR manipulation made easy
  ☆24Updated 2 years ago
• jsecurity101 / LDAPMon
  ☆45Updated last year
• naacbin / CovenantDecryptor
  ☆20Updated last year
• ignacioj / WhacAMole
  Live memory analysis detecting malware IOCs in processes, modules, handles, tokens, threads, .NET assemblies, memory address space and en…
  ☆36Updated 4 months ago
• 0xThiebaut / PCAPeek
  A proof-of-concept re-assembler for reverse VNC traffic.
  ☆25Updated last year
• DebugPrivilege / OpenProject
  A practical resource on using open-source tools for Incident Response. This repo shares workflows, tool setups, and steps for responding …
  ☆26Updated 2 months ago
• jaredcatkinson / MalwareMorphology
  ☆79Updated 2 months ago
• FarghlyMal / Config-Extractors
  ☆25Updated 2 months ago
• pmatula / Windows-Internals-Learning-Resources
  ☆96Updated 2 months ago
• joe-desimone / rep-research
  ☆68Updated 5 months ago
• CCob / Shwmae
  ☆139Updated this week
• ACE-Responder / ace-proctree
  Create a cool process tree like https://twitter.com/ACEResponder.
  ☆34Updated last year
• Dump-GUY / Get-PDInvokeImports
  Get-PDInvokeImports is tool (PowerShell module) which is able to perform automatic detection of P/Invoke, Dynamic P/Invoke and D/Invoke u…
  ☆53Updated 2 years ago
• BinaryDefense / YaraMemoryScanner
  Simple PowerShell script to enable process scanning with Yara.
  ☆91Updated 2 years ago
• woanware / etw-event-dumper
  ☆32Updated 2 years ago
• sensepost / mydumbedr
  ☆112Updated last year
• SafeBreach-Labs / MagicDot
  A set of rootkit-like abilities for unprivileged users, and vulnerabilities based on the DOT-to-NT path conversion known issue
  ☆96Updated 9 months ago
• peiga / DumpThatLSASS
  Dumping LSASS by Unhooking MiniDumpWriteDump by getting a fresh DbgHelp.dll copy from the disk , plus functions and strings obfuscation
  ☆30Updated 2 years ago
• pracsec / AmsiScanner
  A tool for interacting with the Anti-Malware Scan Interface API for pen testing purposes.
  ☆58Updated last year
• rtfmkiesel / loldrivers-client
  Scan your computer for known vulnerable and known malicious Windows drivers using loldrivers.io
  ☆82Updated 11 months ago
• dr4k0nia / yara-rules
  A collection of my yara rules
  ☆35Updated last year
• brokensound77 / LoFP
  Living off the False Positive!
  ☆33Updated 5 months ago
• ashemery / REDM
  Reverse Engineering and Debugging Malware
  ☆30Updated last year