Alternatives and similar repositories for defender-dump

Users that are interested in defender-dump are comparing it to the libraries listed below

• keydet89 / RegRipper4.0
  RegRipper4.0
  ☆74Updated 3 months ago
• NUKIB / maldump
  Multi-quarantine extractor
  ☆50Updated 6 months ago
• harelsegev / INDXRipper
  Carve file metadata from NTFS index ($I30) attributes
  ☆72Updated last year
• kacos2000 / Prefetch-Browser
  Browse Windows Prefetch versions: 17,23,26,30v1/2,31 & some of SuperFetch .7db/.db's
  ☆63Updated 11 months ago
• edygert / runsc
  runsc loads 32/64 bit shellcode (depending on how runsc is compiled) in a way that makes it easy to load in a debugger. This code is base…
  ☆38Updated 2 years ago
• RussianPanda95 / Yara-Rules
  Repository of Yara Rules
  ☆128Updated 2 weeks ago
• knight0x07 / OneNoteAnalyzer
  A C# based tool for analysing malicious OneNote documents
  ☆118Updated 2 years ago
• forensicxlab / VISION-ProcMon
  A ProcessMonitor visualization application written in rust.
  ☆184Updated 2 years ago
• mandiant / gootloader
  Collection of scripts used to deobfuscate GOOTLOADER malware samples.
  ☆73Updated 2 weeks ago
• GDATAAdvancedAnalytics / winreg-tasks
  ☆20Updated 3 years ago
• jonny-jhnson / JonMon
  ☆244Updated 5 months ago
• airbus-cert / minusone
  Powershell Linter
  ☆86Updated last week
• gtworek / VolatileDataCollector
  ☆204Updated 2 weeks ago
• 100DaysofYARA / 2024
  Rules shared by the community from 100 Days of YARA 2024
  ☆86Updated 10 months ago
• EricZimmerman / RBCmd
  Recycle bin artifact parser
  ☆55Updated 9 months ago
• Neo23x0 / YARA-Style-Guide
  A specification and style guide for YARA rules
  ☆60Updated last year
• fr0gger / MalwareMuncher
  Malware Muncher is a proof-of-concept Python script that utilizes the Frida framework for binary instrumentation and API hooking, enablin…
  ☆46Updated 2 years ago
• ashemery / malware4edu
  Malware Samples that could be used for teaching students about malware analysis.
  ☆63Updated last year
• embee-research / Yara-detection-rules
  Yara Rules for Modern Malware
  ☆78Updated last year
• g-les / 100DaysofYARA
  100 Days of YARA to be updated with rules & ideas as the year progresses
  ☆60Updated 2 years ago
• elastic / labs-releases
  Elastic Security Labs releases
  ☆81Updated last month
• JPCERTCC / jpcert-yara
  JPCERT/CC public YARA rules repository
  ☆110Updated last week
• Immersive-Labs-Sec / volatility_plugins
  Volatility 3 Plugins
  ☆21Updated 3 years ago
• moaistory / WinSearchDBAnalyzer
  http://moaistory.blogspot.com/2018/10/winsearchdbanalyzer.html
  ☆126Updated last year
• jklepsercyber / defender-detectionhistory-parser
  A parser of Windows Defender's DetectionHistory forensic artifact, containing substantial info about quarantined files and executables.
  ☆113Updated 3 years ago
• Malandrone / PowerDecode
  PowerDecode is a PowerShell-based tool that allows to deobfuscate PowerShell scripts obfuscated across multiple layers. The tool performs…
  ☆226Updated last year
• Neo23x0 / YARA-Performance-Guidelines
  A guide on how to write fast and memory friendly YARA rules
  ☆157Updated 9 months ago
• Squiblydoo / MalAPIReader
  Reads and prints information from the website MalAPI.io
  ☆19Updated 3 years ago
• Squiblydoo / certReport
  A tool to support the reporting of Authenticode Certificates by reducing the effort on individuals to report.
  ☆37Updated 2 months ago
• JPCERTCC / Windows-Symbol-Tables
  Windows symbol tables for Volatility 3
  ☆91Updated last year