Alternatives and similar repositories for VM-Packages

Users that are interested in VM-Packages are comparing it to the libraries listed below

• forensicxlab / VISION-ProcMon
  A ProcessMonitor visualization application written in rust.
  ☆178Updated last year
• gtworek / VolatileDataCollector
  ☆201Updated 6 months ago
• LETHAL-FORENSICS / Collect-MemoryDump
  Collect-MemoryDump - Automated Creation of Windows Memory Snapshots for DFIR
  ☆239Updated last month
• SentineLabs / SentinelLabs_RevCore_Tools
  The Windows Malware Analysis Reversing Core Tools
  ☆95Updated 4 years ago
• knight0x07 / OneNoteAnalyzer
  A C# based tool for analysing malicious OneNote documents
  ☆113Updated 2 years ago
• RussianPanda95 / Yara-Rules
  Repository of Yara Rules
  ☆110Updated last month
• Malandrone / PowerDecode
  PowerDecode is a PowerShell-based tool that allows to deobfuscate PowerShell scripts obfuscated across multiple layers. The tool performs…
  ☆186Updated last year
• Ahmed-AL-Maghraby / Windows-Registry-Analysis-Cheat-Sheet
  ☆159Updated last year
• mttaggart / blue-jupyter
  Jupyter Notebooks for the Blue Team
  ☆144Updated last month
• mgeeky / msidump
  MSI Dump - a tool that analyzes malicious MSI installation packages, extracts files, streams, binary data and incorporates YARA scanner.
  ☆209Updated 2 years ago
• jsecurity101 / TelemetrySource
  ☆246Updated last year
• Unprotect-Project / Unprotect_Submission
  Unprotect is a collaborative platform dedicated to uncovering and documenting malware evasion techniques. We invite you to join us in thi…
  ☆160Updated last month
• nasbench / Misc-Research
  A collection of tools, scripts and personal research
  ☆128Updated last month
• jstrosch / sclauncher
  A small program written in C that is designed to load 32/64-bit shellcode and allow for execution or debugging. Can also output PE files …
  ☆143Updated 9 months ago
• dodo-sec / Malware-Analysis
  ☆136Updated 2 years ago
• 100DaysofYARA / 2024
  Rules shared by the community from 100 Days of YARA 2024
  ☆85Updated 4 months ago
• LOLESXi-Project / LOLESXi
  LOLESXi is a curated compilation of binaries/scripts available in VMware ESXi that are were used to by adversaries in their intrusions. T…
  ☆123Updated 3 months ago
• yarox24 / EvtxHussar
  Initial triage of Windows Event logs
  ☆97Updated 10 months ago
• CrowdStrike / SuperMem
  A python script developed to process Windows memory images based on triage type.
  ☆262Updated last year
• Immersive-Labs-Sec / SliverC2-Forensics
  A collection of tools and detections for the Sliver C2 Frameworj
  ☆125Updated 2 years ago
• knez / defender-dump
  Dump quarantined files from Windows Defender
  ☆63Updated 3 years ago
• archcloudlabs / HackSpaceCon_Malware_Analysis_Course
  Free training course offered at Hack Space Con 2023
  ☆138Updated 2 years ago
• Neo23x0 / YARA-Style-Guide
  A specification and style guide for YARA rules
  ☆48Updated last year
• blueteam0ps / memOptix
  A Jupyter notebook to assist with the analysis of the output generated from Volatility memory extraction framework.
  ☆95Updated last year
• Karneades / malware-persistence
  Collection of malware persistence and hunting information. Be a persistent persistence hunter!
  ☆176Updated 3 months ago
• jsecurity101 / JonMon
  ☆221Updated 3 months ago
• mandiant / gootloader
  Collection of scripts used to deobfuscate GOOTLOADER malware samples.
  ☆61Updated 4 months ago
• Cyb3r-Monk / ACCD
  Active C&C Detector
  ☆154Updated last year
• 3CORESec / MAL-CL
  MAL-CL (Malicious Command-Line)
  ☆312Updated 2 years ago
• Neo23x0 / YARA-Performance-Guidelines
  A guide on how to write fast and memory friendly YARA rules
  ☆142Updated 3 months ago