Alternatives and similar repositories for VM-Packages:

Users that are interested in VM-Packages are comparing it to the libraries listed below

• forensicxlab / VISION-ProcMon
  A ProcessMonitor visualization application written in rust.
  ☆178Updated last year
• gtworek / VolatileDataCollector
  ☆200Updated 4 months ago
• Malandrone / PowerDecode
  PowerDecode is a PowerShell-based tool that allows to deobfuscate PowerShell scripts obfuscated across multiple layers. The tool performs…
  ☆176Updated 10 months ago
• LETHAL-FORENSICS / Collect-MemoryDump
  Collect-MemoryDump - Automated Creation of Windows Memory Snapshots for DFIR
  ☆235Updated 2 weeks ago
• knight0x07 / OneNoteAnalyzer
  A C# based tool for analysing malicious OneNote documents
  ☆111Updated last year
• SentineLabs / SentinelLabs_RevCore_Tools
  The Windows Malware Analysis Reversing Core Tools
  ☆92Updated 4 years ago
• mgeeky / msidump
  MSI Dump - a tool that analyzes malicious MSI installation packages, extracts files, streams, binary data and incorporates YARA scanner.
  ☆205Updated last year
• mandiant / gootloader
  Collection of scripts used to deobfuscate GOOTLOADER malware samples.
  ☆60Updated 3 months ago
• 100DaysofYARA / 2024
  Rules shared by the community from 100 Days of YARA 2024
  ☆85Updated 2 months ago
• netskopeoss / NetskopeThreatLabsIOCs
  ☆124Updated 3 weeks ago
• knez / defender-dump
  Dump quarantined files from Windows Defender
  ☆61Updated 2 years ago
• RussianPanda95 / Yara-Rules
  Repository of Yara Rules
  ☆103Updated last month
• Unprotect-Project / Unprotect_Submission
  Unprotect is a collaborative platform dedicated to uncovering and documenting malware evasion techniques. We invite you to join us in thi…
  ☆158Updated last month
• jsecurity101 / TelemetrySource
  ☆236Updated 10 months ago
• mttaggart / blue-jupyter
  Jupyter Notebooks for the Blue Team
  ☆145Updated this week
• jstrosch / sclauncher
  A small program written in C that is designed to load 32/64-bit shellcode and allow for execution or debugging. Can also output PE files …
  ☆139Updated 8 months ago
• Neo23x0 / YARA-Style-Guide
  A specification and style guide for YARA rules
  ☆45Updated last year
• blueteam0ps / memOptix
  A Jupyter notebook to assist with the analysis of the output generated from Volatility memory extraction framework.
  ☆95Updated last year
• CrowdStrike / SuperMem
  A python script developed to process Windows memory images based on triage type.
  ☆261Updated last year
• viper-framework / viper2
  File analysis and management framework.
  ☆83Updated last year
• AndrewRathbun / VanillaWindowsReference
  A repo that contains recursive directory listings (using PowerShell) of a vanilla (clean) install of every Windows OS version to compare …
  ☆154Updated 4 months ago
• Ahmed-AL-Maghraby / Windows-Registry-Analysis-Cheat-Sheet
  ☆158Updated last year
• Karneades / malware-persistence
  Collection of malware persistence and hunting information. Be a persistent persistence hunter!
  ☆177Updated 2 months ago
• Cyb3r-Monk / ACCD
  Active C&C Detector
  ☆152Updated last year
• LOLESXi-Project / LOLESXi
  LOLESXi is a curated compilation of binaries/scripts available in VMware ESXi that are were used to by adversaries in their intrusions. T…
  ☆121Updated last month
• IppSec / PowerSiem
  ☆118Updated 11 months ago
• nasbench / Misc-Research
  A collection of tools, scripts and personal research
  ☆127Updated 8 months ago
• The-DFIR-Report / Yara-Rules
  ☆67Updated last month
• archcloudlabs / HackSpaceCon_Malware_Analysis_Course
  Free training course offered at Hack Space Con 2023
  ☆138Updated last year
• Neo23x0 / YARA-Performance-Guidelines
  A guide on how to write fast and memory friendly YARA rules
  ☆141Updated last month