libyal / libevtLinks
Library and tools to access the Windows Event Log (EVT) format
☆60Updated last year
Alternatives and similar repositories for libevt
Users that are interested in libevt are comparing it to the libraries listed below
Sorting:
- Recover event log entries from an image by heurisitically looking for record structures.☆27Updated 9 years ago
- Work Fast With the pattern matching swiss knife for malware researchers.☆38Updated 9 years ago
- An NTFS journal parser☆82Updated 9 years ago
- Various Yara signatures (possibly to be included in a release later).☆86Updated 6 years ago
- Volatility memory forensics plugin for extracting Windows DNS Cache☆29Updated 8 years ago
- YARA rules for use with ProcFilter☆87Updated 8 years ago
- Pure Python parser for data encoded by .NET's BinaryFormatter☆50Updated 6 years ago
- zer0m0n driver for cuckoo sandbox☆88Updated 9 years ago
- Royal APT - APT15 - Related Information from NCC Group Cyber Defense Operations Research☆53Updated 7 years ago
- Handy scripts to speed up malware analysis☆35Updated last year
- Modified edition of cuckoomon☆49Updated 7 years ago
- Network detector for Winnti malware☆20Updated 7 years ago
- a collection of yara rules for binary analysis☆24Updated 7 years ago
- Tools for parsing rulesets using the exact grammar as YARA. Written in Go.☆85Updated 2 years ago
- Simple NTFS crawler.☆56Updated 8 years ago
- CAPE monitor DLLs☆41Updated 5 years ago
- Test suite for bypassing Malware sandboxes.☆39Updated 10 years ago
- Analysis PE file or Shellcode☆49Updated 9 years ago
- Shows command lines used by latest instances analyzed on Hybrid-Analysis☆43Updated 6 years ago
- ☆13Updated 9 years ago
- BinSequencer is a script designed to find a common pattern of bytes within a set of samples and generate a YARA rule from the identified…☆77Updated 3 years ago
- Tool to decompress data from Windows 10 page files and memory dumps, that has been compressed by the Windows 10 memory manager.☆51Updated 6 years ago
- Modified edition of cuckoo community modules☆32Updated 5 years ago
- Telsy CTI Research Team☆57Updated 4 years ago
- Identifying and Disrupting Crypto-Ransomware (and Destructive Malware) using handle heurustics☆55Updated 10 years ago
- Pure Python parser for classic Windows Event Log files (.evt)☆50Updated 2 years ago
- Command-line Interface for Binar.ly☆38Updated 8 years ago
- Yaras Random☆21Updated 6 years ago
- Binary commandline executable to parse ETL files☆67Updated 7 years ago
- Automatically exported from code.google.com/p/verify-sigs☆18Updated 8 years ago