Alternatives and similar repositories for defender-dump

Users that are interested in defender-dump are comparing it to the libraries listed below

• mandiant / gootloader
  Collection of scripts used to deobfuscate GOOTLOADER malware samples.
  ☆77Updated 3 weeks ago
• edygert / runsc
  runsc loads 32/64 bit shellcode (depending on how runsc is compiled) in a way that makes it easy to load in a debugger. This code is base…
  ☆38Updated 3 years ago
• kacos2000 / Prefetch-Browser
  Browse Windows Prefetch versions: 17,23,26,30v1/2,31 & some of SuperFetch .7db/.db's
  ☆64Updated last year
• keydet89 / RegRipper4.0
  RegRipper4.0
  ☆80Updated last month
• airbus-cert / minusone
  Powershell Linter
  ☆86Updated last month
• forensicxlab / VISION-ProcMon
  A ProcessMonitor visualization application written in rust.
  ☆184Updated 2 years ago
• jonny-jhnson / JonMon
  ☆250Updated 7 months ago
• knight0x07 / OneNoteAnalyzer
  A C# based tool for analysing malicious OneNote documents
  ☆118Updated 2 years ago
• RussianPanda95 / Yara-Rules
  Repository of Yara Rules
  ☆138Updated last week
• gtworek / VolatileDataCollector
  ☆213Updated last month
• pan-unit42 / dotnetfile
  ☆113Updated 4 months ago
• harelsegev / INDXRipper
  Carve file metadata from NTFS index ($I30) attributes
  ☆71Updated last year
• moaistory / WinSearchDBAnalyzer
  http://moaistory.blogspot.com/2018/10/winsearchdbanalyzer.html
  ☆127Updated last year
• NUKIB / maldump
  Multi-quarantine extractor
  ☆50Updated 8 months ago
• 100DaysofYARA / 2024
  Rules shared by the community from 100 Days of YARA 2024
  ☆88Updated last year
• csababarta / memory-baseliner
  Memory Baseliner is a script that can compare two windows memory images or perform frequency of occurrence / data stacking analysis on mu…
  ☆55Updated 2 years ago
• Malandrone / PowerDecode
  PowerDecode is a PowerShell-based tool that allows to deobfuscate PowerShell scripts obfuscated across multiple layers. The tool performs…
  ☆228Updated last year
• Squiblydoo / certReport
  A tool to support the reporting of Authenticode Certificates by reducing the effort on individuals to report.
  ☆38Updated last month
• GDATAAdvancedAnalytics / winreg-tasks
  ☆21Updated 3 years ago
• Neo23x0 / YARA-Style-Guide
  A specification and style guide for YARA rules
  ☆65Updated last year
• Immersive-Labs-Sec / volatility_plugins
  Volatility 3 Plugins
  ☆21Updated 3 years ago
• RussianPanda95 / Configuration_extractors
  Configuration Extractors for Malware
  ☆122Updated 9 months ago
• JPCERTCC / Windows-Symbol-Tables
  Windows symbol tables for Volatility 3
  ☆92Updated last year
• ashemery / malware4edu
  Malware Samples that could be used for teaching students about malware analysis.
  ☆63Updated last year
• jonny-jhnson / TelemetrySource
  ☆260Updated last year
• XForceIR / SideLoadHunter
  ☆27Updated 3 years ago
• dr4k0nia / tooling-playground
  A collection of small scripts and tools for deobfuscation and malware analysis.
  ☆66Updated 2 years ago
• EricZimmerman / RBCmd
  Recycle bin artifact parser
  ☆58Updated 11 months ago
• Neo23x0 / YARA-Performance-Guidelines
  A guide on how to write fast and memory friendly YARA rules
  ☆162Updated 11 months ago
• jonny-jhnson / ETWInspector
  ☆181Updated 9 months ago