Alternatives and similar repositories for flare-floss:

Users that are interested in flare-floss are comparing it to the libraries listed below

• mandiant / flare-fakenet-ng
  FakeNet-NG - Next Generation Dynamic Network Analysis Tool
  ☆1,834Updated last month
• hasherezade / pe-sieve
  Scans a given process. Recognizes and dumps a variety of potentially malicious implants (replaced/injected PEs, shellcodes, hooks, in-mem…
  ☆3,183Updated last month
• mandiant / flare-vm
  A collection of software installations scripts for Windows systems that allows you to easily setup and maintain a reverse engineering env…
  ☆6,779Updated this week
• Yara-Rules / rules
  Repository of yara rules
  ☆4,247Updated 9 months ago
• Neo23x0 / signature-base
  YARA signature and IOC database for my scanners and tools
  ☆2,525Updated last month
• Neo23x0 / yarGen
  yarGen is a generator for YARA rules
  ☆1,586Updated 7 months ago
• InQuest / awesome-yara
  A curated list of awesome YARA rules, tools, and people.
  ☆3,646Updated 2 months ago
• kevoreilly / CAPEv2
  Malware Configuration And Payload Extraction
  ☆2,109Updated this week
• DidierStevens / DidierStevensSuite
  Please no pull requests for this repository. Thanks!
  ☆2,089Updated 3 weeks ago
• Rurik / Noriben
  Noriben - Portable, Simple, Malware Analysis Sandbox
  ☆1,136Updated last year
• hasherezade / hollows_hunter
  Scans all running processes. Recognizes and dumps a variety of potentially malicious implants (replaced/implanted PEs, shellcodes, hooks,…
  ☆2,085Updated 2 weeks ago
• hacksysteam / HackSysExtremeVulnerableDriver
  HackSys Extreme Vulnerable Driver (HEVD) - Windows & Linux
  ☆2,528Updated this week
• alexandreborges / malwoverview
  Malwoverview is a first response tool used for threat hunting and offers intel information from Virus Total, Hybrid Analysis, URLHaus, Po…
  ☆3,070Updated last month
• VirusTotal / yara
  The pattern matching swiss knife
  ☆8,463Updated this week
• JusticeRage / Manalyze
  A static analyzer for PE executables.
  ☆1,032Updated last year
• erocarrera / pefile
  pefile is a Python module to read and work with PE (Portable Executable) files
  ☆1,895Updated 4 months ago
• mandiant / flare-ida
  IDA Pro utilities from FLARE team
  ☆2,267Updated 2 months ago
• google / rekall
  Rekall Memory Forensic Framework
  ☆1,932Updated 4 years ago
• ayoubfaouzi / al-khaser
  Public malware techniques used in the wild: Virtual Machine, Emulation, Debuggers, Sandbox detection.
  ☆6,033Updated this week
• Neo23x0 / Loki
  Loki - Simple IOC and YARA Scanner
  ☆3,444Updated last month
• CERT-Polska / drakvuf-sandbox
  DRAKVUF Sandbox - automated hypervisor-level malware analysis system
  ☆1,084Updated last month
• mandiant / speakeasy
  Windows kernel and user mode emulation.
  ☆1,553Updated 9 months ago
• volatilityfoundation / volatility3
  Volatility 3.0 development
  ☆2,822Updated this week
• mattnotmax / cyberchef-recipes
  A list of cyber-chef recipes and curated links
  ☆2,049Updated 7 months ago
• cea-sec / miasm
  Reverse engineering framework in Python
  ☆3,525Updated 4 months ago
• decalage2 / oletools
  oletools - python tools to analyze MS OLE2 files (Structured Storage, Compound File Binary Format) and MS Office documents, for malware a…
  ☆2,972Updated 3 weeks ago
• VirusTotal / yara-python
  The Python interface for YARA
  ☆671Updated last month
• LOLBAS-Project / LOLBAS
  Living Off The Land Binaries And Scripts - (LOLBins and LOLScripts)
  ☆7,215Updated this week
• googleprojectzero / sandbox-attacksurface-analysis-tools
  Set of tools to analyze Windows sandboxes for exposed attack surface.
  ☆2,101Updated last month
• bluscreenofjeff / Red-Team-Infrastructure-Wiki
  Wiki to collect Red Team infrastructure hardening resources
  ☆4,195Updated 9 months ago