Alternatives and similar repositories for nTimetools

Users that are interested in nTimetools are comparing it to the libraries listed below

• stairwell-inc / cobalt-strike-stager-parser
  ☆34Updated 2 years ago
• keydet89 / LNK
  Repository for LNK stuff
  ☆31Updated 2 years ago
• password123456 / CertVerify
  A scanner that files with compromised or untrusted code signing certificates written in python.
  ☆65Updated last year
• SIFalcon / Detection
  ☆22Updated 2 years ago
• jstrosch / subparse
  Modular malware analysis artifact collection and correlation framework
  ☆53Updated last year
• jonny-jhnson / LDAPMon
  ☆45Updated last year
• jfmaes / Emulation-Workshop
  The repository accompanying the Buer Emulation workshop
  ☆24Updated 3 years ago
• DidierStevens / AdHoc
  AdHoc solutions
  ☆48Updated last year
• BinaryDefense / YaraMemoryScanner
  Simple PowerShell script to enable process scanning with Yara.
  ☆95Updated 2 years ago
• matterpreter / FindETWProviderImage
  Quickly search for references to a GUID in DLLs, EXEs, and drivers
  ☆74Updated 3 years ago
• RomaissaAdjailia / Get-AppLockerEventlog
  This is a repo for fetching Applocker event log by parsing the win-event log
  ☆31Updated 3 years ago
• peasead / windows-sandbox-to-elastic
  Rapidly building a Windows 10 system to use for dynamic malware analysis (sandbox), sending data to Elastic Cloud.
  ☆50Updated last year
• uf0o / PykDumper
  Dumping credentials through windbg and pykd
  ☆41Updated last year
• DISREL / Conti-Leaked-Playbook-TTPs
  MITRE TTPs derived from Conti's leaked playbooks from XSS.IS
  ☆39Updated 3 years ago
• memprocfshunt / MemProcFSHunter
  A powershell parser for https://github.com/ufrisk/MemProcFS
  ☆44Updated 4 years ago
• threatexpress / procdot_sandbox
  ProcDot Malware Sandbox
  ☆24Updated last week
• deepinstinct / DeMotet
  Unpacking and decryption tools for the Emotet malware
  ☆45Updated 3 years ago
• trustedsec / tscopy
  ☆93Updated 3 years ago
• TheEnergyStory / malware_analysis_tools
  Tools helpful for malware analysis
  ☆23Updated 11 months ago
• y3n11 / Captain
  Userland API monitor for threat hunting
  ☆58Updated 5 years ago
• MITRECND / picaboo
  Specialized tool to dump Position Independent Code.
  ☆22Updated 5 years ago
• 0xjxd / SquirrelWaffle-From-Maldoc-to-Cobalt-Strike
  ☆11Updated 3 years ago
• jschicht / SetMace
  Manipulate timestamps on NTFS
  ☆52Updated 10 years ago
• AhmedKamal1432 / Evilize
  Triaging Windows event logs based on SANS Poster
  ☆39Updated 2 years ago
• tasox / Epimitheus
  Epimitheus is a tool that uses graphical database Neo4j for Windows Events visualization.
  ☆19Updated 3 years ago
• ACE-Responder / ace-proctree
  Create a cool process tree like https://twitter.com/ACEResponder.
  ☆35Updated 2 years ago
• ignacioj / WhacAMole
  Live memory analysis detecting malware IOCs in processes, modules, handles, tokens, threads, .NET assemblies, memory address space and en…
  ☆42Updated 10 months ago
• hasherezade / mal_unpack_py
  Python wrappers for mal_unpack
  ☆36Updated last year
• ufrisk / MemProcFS-plugins
  ☆57Updated 9 months ago
• g-les / 100DaysofYARA
  100 Days of YARA to be updated with rules & ideas as the year progresses
  ☆60Updated 2 years ago