mandiant / VM-Packages
Chocolatey packages supporting the analysis environment projects FLARE-VM & Commando VM.
☆155Updated this week
Alternatives and similar repositories for VM-Packages:
Users that are interested in VM-Packages are comparing it to the libraries listed below
- Repository of Yara Rules☆96Updated 2 weeks ago
- A ProcessMonitor visualization application written in rust.☆176Updated last year
- The Windows Malware Analysis Reversing Core Tools☆90Updated 4 years ago
- ☆196Updated 2 months ago
- A C# based tool for analysing malicious OneNote documents☆109Updated last year
- Collect-MemoryDump - Automated Creation of Windows Memory Snapshots for DFIR☆222Updated 10 months ago
- Rules shared by the community from 100 Days of YARA 2024☆83Updated 2 weeks ago
- Free training course offered at Hack Space Con 2023☆136Updated last year
- PowerDecode is a PowerShell-based tool that allows to deobfuscate PowerShell scripts obfuscated across multiple layers. The tool performs…☆165Updated 8 months ago
- A Jupyter notebook to assist with the analysis of the output generated from Volatility memory extraction framework.☆94Updated last year
- Jupyter Notebooks for the Blue Team☆143Updated 2 years ago
- Collection of scripts used to deobfuscate GOOTLOADER malware samples.☆58Updated 3 weeks ago
- ☆227Updated 8 months ago
- ☆186Updated last week
- A specification and style guide for YARA rules☆43Updated 11 months ago
- Initial triage of Windows Event logs☆93Updated 7 months ago
- A repository of credential stealer formats☆129Updated this week
- Active C&C Detector☆152Updated last year
- ☆97Updated last month
- Elastic Security Labs releases☆55Updated 2 months ago
- The LOLBins CTI-Driven (Living-Off-the-Land Binaries Cyber Threat Intelligence Driven) is a project that aims to help cyber defenders und…☆116Updated 9 months ago
- A collection of tools, scripts and personal research☆120Updated 6 months ago
- ☆131Updated last year
- Collection of malware persistence and hunting information. Be a persistent persistence hunter!☆172Updated last month
- A really good DFIR automation for collecting and analyzing evidence designed for cybersecurity professionals.☆151Updated 7 months ago
- ☆63Updated last month
- LOLESXi is a curated compilation of binaries/scripts available in VMware ESXi that are were used to by adversaries in their intrusions. T…☆115Updated last month
- File analysis and management framework.☆79Updated last year
- The Linux DFIR Collector is a stand-alone collection tool for Gnu / Linux. Dump artifacts in json format with very few impacts on the hos…☆30Updated 2 years ago
- Repository for different Windows DFIR related CMDs, PowerShell CMDlets, etc, plus workshops that I did for different conferences or event…☆77Updated 3 years ago