knight0x07 / OneNoteAnalyzer
A C# based tool for analysing malicious OneNote documents
☆107Updated last year
Related projects ⓘ
Alternatives and complementary repositories for OneNoteAnalyzer
- Yara Rules for Modern Malware☆67Updated 8 months ago
- A ProcessMonitor visualization application written in rust.☆176Updated last year
- Simple PowerShell script to enable process scanning with Yara.☆90Updated 2 years ago
- ☆187Updated 3 weeks ago
- A repository hosting example goodware evtx logs containing sample software installation and basic user interaction☆68Updated last year
- Active C&C Detector☆150Updated last year
- Repository of Yara Rules☆88Updated last month
- Default Detections for EDR☆94Updated 9 months ago
- A collection of tools, scripts and personal research☆113Updated 4 months ago
- ☆76Updated 6 months ago
- PowerShell script that aim to help uncovering (eventual) persistence mechanisms deployed by a threat actor following an Active Directory …☆93Updated last year
- Python based tool to extract forensic info from EventTranscript.db (Windows Diagnostic Data)☆67Updated last year
- Elastic Security Labs releases☆52Updated 3 weeks ago
- YARA rule analyzer to improve rule quality and performance☆93Updated 11 months ago
- This repository is meant to catalog network and host artifacts associated with various EDR products "shell" and response functionalities.☆72Updated 2 months ago
- Signature-based detection of malware features based on Windows API call sequences. It's like YARA for sandbox API traces!☆82Updated last year
- A collection of small scripts and tools for deobfuscation and malware analysis.☆65Updated last year
- An exercise to practice deobfuscating PowerShell Scripts.☆28Updated last year
- ☆173Updated 3 months ago
- A GUI to query the API of abuse.ch.☆70Updated 2 years ago
- Memory Baseliner is a script that can compare two windows memory images or perform frequency of occurrence / data stacking analysis on mu…☆49Updated last year
- ☆222Updated 6 months ago
- Collect-MemoryDump - Automated Creation of Windows Memory Snapshots for DFIR☆220Updated 8 months ago
- IOC Collection 2022☆55Updated last year
- Detection rule validation☆41Updated last year
- The Windows Malware Analysis Reversing Core Tools☆89Updated 3 years ago
- Automating EDR Testing with reference to MITRE ATTACK via Cobalt Strike [Purple Team].☆146Updated last year
- Rules Shared by the Community from 100 Days of YARA 2023☆78Updated last year
- A Jupyter notebook to assist with the analysis of the output generated from Volatility memory extraction framework.☆94Updated last year