Alternatives and similar repositories for defender-dump

Users that are interested in defender-dump are comparing it to the libraries listed below

• keydet89 / RegRipper4.0
  RegRipper4.0
  ☆72Updated 2 months ago
• kacos2000 / Prefetch-Browser
  Browse Windows Prefetch versions: 17,23,26,30v1/2,31 & some of SuperFetch .7db/.db's
  ☆62Updated 10 months ago
• Neo23x0 / YARA-Style-Guide
  A specification and style guide for YARA rules
  ☆59Updated last year
• mandiant / gootloader
  Collection of scripts used to deobfuscate GOOTLOADER malware samples.
  ☆64Updated 10 months ago
• harelsegev / INDXRipper
  Carve file metadata from NTFS index ($I30) attributes
  ☆71Updated last year
• forensicxlab / VISION-ProcMon
  A ProcessMonitor visualization application written in rust.
  ☆184Updated 2 years ago
• NUKIB / maldump
  Multi-quarantine extractor
  ☆47Updated 5 months ago
• knight0x07 / OneNoteAnalyzer
  A C# based tool for analysing malicious OneNote documents
  ☆117Updated 2 years ago
• csababarta / memory-baseliner
  Memory Baseliner is a script that can compare two windows memory images or perform frequency of occurrence / data stacking analysis on mu…
  ☆55Updated 2 years ago
• gtworek / VolatileDataCollector
  ☆203Updated last year
• Neo23x0 / YARA-Performance-Guidelines
  A guide on how to write fast and memory friendly YARA rules
  ☆154Updated 8 months ago
• edygert / runsc
  runsc loads 32/64 bit shellcode (depending on how runsc is compiled) in a way that makes it easy to load in a debugger. This code is base…
  ☆38Updated 2 years ago
• 100DaysofYARA / 2024
  Rules shared by the community from 100 Days of YARA 2024
  ☆86Updated 10 months ago
• EricZimmerman / RBCmd
  Recycle bin artifact parser
  ☆55Updated 8 months ago
• EricZimmerman / Srum
  ☆49Updated 9 months ago
• RussianPanda95 / Yara-Rules
  Repository of Yara Rules
  ☆123Updated last month
• jklepsercyber / defender-detectionhistory-parser
  A parser of Windows Defender's DetectionHistory forensic artifact, containing substantial info about quarantined files and executables.
  ☆113Updated 3 years ago
• JPCERTCC / jpcert-yara
  JPCERT/CC public YARA rules repository
  ☆110Updated 10 months ago
• jonny-jhnson / JonMon
  ☆244Updated 4 months ago
• CyberCX-DFIR / usnjrnl_rewind
  USN Journal full path builder
  ☆62Updated last year
• Squiblydoo / certReport
  A tool to support the reporting of Authenticode Certificates by reducing the effort on individuals to report.
  ☆37Updated 2 months ago
• moaistory / WinSearchDBAnalyzer
  http://moaistory.blogspot.com/2018/10/winsearchdbanalyzer.html
  ☆124Updated last year
• GDATAAdvancedAnalytics / winreg-tasks
  ☆20Updated 3 years ago
• Immersive-Labs-Sec / volatility_plugins
  Volatility 3 Plugins
  ☆21Updated 3 years ago
• NextronSystems / evtx-baseline
  A repository hosting example goodware evtx logs containing sample software installation and basic user interaction
  ☆81Updated 3 weeks ago
• embee-research / Yara-detection-rules
  Yara Rules for Modern Malware
  ☆79Updated last year
• kacos2000 / WinEDB
  Windows.EDB Browser
  ☆58Updated 2 years ago
• pan-unit42 / dotnetfile
  ☆110Updated last month
• ashemery / malware4edu
  Malware Samples that could be used for teaching students about malware analysis.
  ☆61Updated last year
• SentineLabs / SentinelLabs_RevCore_Tools
  The Windows Malware Analysis Reversing Core Tools
  ☆96Updated 4 years ago