malice-plugins / windows-defender

Related projects: ⓘ

• telsy-cyberops / research
  Telsy CTI Research Team
  ☆57Updated 3 years ago
• ohjeongwook / PowerShellRunBox
  Dynamic PowerShell Analysis Framework Based Upon PowerShell Debugging Functionality
  ☆82Updated last year
• Velocidex / go-pe
  A Portable Executable parser for Golang
  ☆47Updated last year
• edeca / rtfraptor
  Extract OLEv1 objects from RTF files by instrumenting Word
  ☆51Updated 4 years ago
• malice-plugins / kaspersky
  Malice Kaspersky Antivirus Plugin
  ☆15Updated 5 years ago
• malice-plugins / office
  Malice Office/OLE/RTF Plugin
  ☆13Updated 6 years ago
• Velocidex / oleparse
  Golang parser for OLE files
  ☆31Updated 3 months ago
• tyranid / DumpReparsePoints
  This is a simple tool to dump all the reparse points on an NTFS volume.
  ☆32Updated 4 years ago
• nccgroup / Royal_APT
  Royal APT - APT15 - Related Information from NCC Group Cyber Defense Operations Research
  ☆52Updated 6 years ago
• stoerchl / yara_zip_module
  ☆12Updated last year
• nao-sec / tknk_scanner
  Community-based integrated malware identification system
  ☆82Updated last year
• botherder / go-autoruns
  Collect autorun records from running system
  ☆59Updated 2 years ago
• malice-plugins / pescan
  Malice PExecutable Plugin
  ☆16Updated 3 years ago
• mandiant / win10_auto
  ☆23Updated 5 years ago
• malware-kitten / shellcode_hashes
  A collection of shellcode hashes
  ☆17Updated 6 years ago
• SecurityRiskAdvisors / PDBlaster
  ☆47Updated 4 years ago
• mandiant / win10_rekall
  Rekall Memory Forensic Framework
  ☆29Updated 5 years ago
• t57root / amcsh
  A More Comfortable (remote) SHell with full pty support and both reverse / bindport connection mode.
  ☆30Updated 11 years ago
• airbus-cert / PSTrace
  Trace ScriptBlock execution for powershell v2
  ☆39Updated 4 years ago
• intezer / analyze-scripts
  ☆25Updated last year
• scottlundgren / w32time
  ☆53Updated 5 years ago
• malice-plugins / bitdefender
  Malice Bitdefender AntiVirus Plugin
  ☆13Updated 4 years ago
• SafeBreach-Labs / Spooler
  ☆58Updated 4 years ago
• ThisIsSecurity / malware
  ☆42Updated 5 years ago
• homjxi0e / ReaCOM
  ReaCOM has got a lot of tools to use and is related to component object model
  ☆73Updated 4 years ago
• Velocidex / go-yara
  Go bindings for YARA
  ☆12Updated 6 months ago
• slyd0g / TimeStomper
  PoC that manipulates Windows file times using SetFileTime() API
  ☆53Updated 5 years ago
• libyal / winevt-kb
  Windows Event Log Knowledge Base
  ☆16Updated 4 months ago
• ohjeongwook / ShellCodeEmulator
  Shellcode emulator written with Unicorn Framework With Process Dump Emulation Environment
  ☆117Updated 4 years ago
• papadp / reflective-injection-detection
  a program to detect reflective dll injection on a live machine
  ☆72Updated 8 years ago