mandiant / VM-Packages
Chocolatey packages supporting the analysis environment projects FLARE-VM & Commando VM.
☆166Updated this week
Alternatives and similar repositories for VM-Packages:
Users that are interested in VM-Packages are comparing it to the libraries listed below
- A ProcessMonitor visualization application written in rust.☆178Updated last year
- ☆199Updated 3 months ago
- The Windows Malware Analysis Reversing Core Tools☆91Updated 4 years ago
- Repository of Yara Rules☆100Updated this week
- A C# based tool for analysing malicious OneNote documents☆110Updated last year
- Active C&C Detector☆152Updated last year
- A collection of tools and detections for the Sliver C2 Frameworj☆116Updated last year
- ☆232Updated 9 months ago
- PowerDecode is a PowerShell-based tool that allows to deobfuscate PowerShell scripts obfuscated across multiple layers. The tool performs…☆172Updated 9 months ago
- LOLESXi is a curated compilation of binaries/scripts available in VMware ESXi that are were used to by adversaries in their intrusions. T…☆118Updated 3 weeks ago
- Free training course offered at Hack Space Con 2023☆137Updated last year
- ☆206Updated 3 weeks ago
- Collection of scripts used to deobfuscate GOOTLOADER malware samples.☆60Updated 2 months ago
- Rules shared by the community from 100 Days of YARA 2024☆83Updated last month
- ☆155Updated last year
- The LOLBins CTI-Driven (Living-Off-the-Land Binaries Cyber Threat Intelligence Driven) is a project that aims to help cyber defenders und…☆118Updated 10 months ago
- Collect-MemoryDump - Automated Creation of Windows Memory Snapshots for DFIR☆225Updated this week
- Configuration Extractors for Malware☆91Updated 3 weeks ago
- A Jupyter notebook to assist with the analysis of the output generated from Volatility memory extraction framework.☆94Updated last year
- File analysis and management framework.☆82Updated last year
- A collection of tools, scripts and personal research☆125Updated 7 months ago
- ☆132Updated last year
- MSI Dump - a tool that analyzes malicious MSI installation packages, extracts files, streams, binary data and incorporates YARA scanner.☆204Updated last year
- A really good DFIR automation for collecting and analyzing evidence designed for cybersecurity professionals.☆151Updated 9 months ago
- Segugio allows the execution and tracking of critical steps in the malware detonation process, from clicking on the first stage to extrac…☆146Updated 5 months ago
- ☆296Updated 3 months ago
- Blue Team detection lab created with Terraform and Ansible in Azure.☆145Updated 3 months ago
- ☆117Updated 10 months ago
- Python tool to check rootkits in Windows kernel☆192Updated 2 weeks ago
- Unprotect is a collaborative platform dedicated to uncovering and documenting malware evasion techniques. We invite you to join us in thi…☆154Updated last month