Alternatives and similar repositories for nTimetools

Users that are interested in nTimetools are comparing it to the libraries listed below

• jstrosch / subparse
  Modular malware analysis artifact collection and correlation framework
  ☆53Updated last year
• password123456 / CertVerify
  A scanner that files with compromised or untrusted code signing certificates written in python.
  ☆65Updated 2 years ago
• TheEnergyStory / malware_analysis_tools
  Tools helpful for malware analysis
  ☆23Updated last year
• AhmedKamal1432 / Evilize
  Triaging Windows event logs based on SANS Poster
  ☆42Updated last month
• Immersive-Labs-Sec / BruteRatel-DetectionTools
  A collection of Tools and Rules for decoding Brute Ratel C4 badgers
  ☆66Updated 3 years ago
• jonny-jhnson / LDAPMon
  ☆45Updated 2 years ago
• DidierStevens / AdHoc
  AdHoc solutions
  ☆48Updated 2 years ago
• keydet89 / LNK
  Repository for LNK stuff
  ☆31Updated 3 years ago
• uf0o / PykDumper
  Dumping credentials through windbg and pykd
  ☆41Updated 2 years ago
• stairwell-inc / cobalt-strike-stager-parser
  ☆36Updated 3 years ago
• DISREL / Conti-Leaked-Playbook-TTPs
  MITRE TTPs derived from Conti's leaked playbooks from XSS.IS
  ☆40Updated 4 years ago
• NVISOsecurity / blogposts
  A repo to house files for our blogposts on blog.nviso.eu
  ☆74Updated 9 months ago
• bartblaze / DotNet-MetaData
  Identifies metadata of .NET binary files.
  ☆21Updated last year
• MITRECND / picaboo
  Specialized tool to dump Position Independent Code.
  ☆22Updated 5 years ago
• ignacioj / WhacAMole
  Live memory analysis detecting malware IOCs in processes, modules, handles, tokens, threads, .NET assemblies, memory address space and en…
  ☆43Updated last year
• hosom / honeycred
  Utility to inject honey tokens into lsass.
  ☆28Updated 8 years ago
• jfmaes / Emulation-Workshop
  The repository accompanying the Buer Emulation workshop
  ☆23Updated 4 years ago
• RomaissaAdjailia / Get-AppLockerEventlog
  This is a repo for fetching Applocker event log by parsing the win-event log
  ☆31Updated 3 years ago
• 0xjxd / SquirrelWaffle-From-Maldoc-to-Cobalt-Strike
  ☆11Updated 4 years ago
• matterpreter / FindETWProviderImage
  Quickly search for references to a GUID in DLLs, EXEs, and drivers
  ☆75Updated 4 years ago
• BinaryDefense / YaraMemoryScanner
  Simple PowerShell script to enable process scanning with Yara.
  ☆96Updated 3 years ago
• embee-research / Icedid-file-decryptor
  Static Decryptor for IcedID Malware
  ☆18Updated 3 years ago
• 0x534a / dynmx
  Signature-based detection of malware features based on Windows API call sequences. It's like YARA for sandbox API traces!
  ☆82Updated 2 years ago
• y3n11 / Captain
  Userland API monitor for threat hunting
  ☆58Updated 5 years ago
• trustedsec / tscopy
  ☆96Updated 3 months ago
• Finch4 / Malware-Analysis-Reports
  My Malware Analysis Reports
  ☆24Updated 3 years ago
• slaughterjames / excelpeek
  ☆38Updated 4 years ago
• memprocfshunt / MemProcFSHunter
  A powershell parser for https://github.com/ufrisk/MemProcFS
  ☆45Updated 4 years ago
• naksyn / talks
  Repo containing my public talks
  ☆23Updated 2 years ago
• deepinstinct / DeMotet
  Unpacking and decryption tools for the Emotet malware
  ☆45Updated 4 years ago