mandiant / gootloaderLinks
Collection of scripts used to deobfuscate GOOTLOADER malware samples.
☆73Updated 2 weeks ago
Alternatives and similar repositories for gootloader
Users that are interested in gootloader are comparing it to the libraries listed below
Sorting:
- Active C&C Detector☆156Updated 2 years ago
- A C# based tool for analysing malicious OneNote documents☆118Updated 2 years ago
- A repository hosting example goodware evtx logs containing sample software installation and basic user interaction☆82Updated last month
- Simple PowerShell script to enable process scanning with Yara.☆96Updated 3 years ago
- Rules shared by the community from 100 Days of YARA 2024☆86Updated 10 months ago
- A list of RMMs designed to be used in automation to build alerts☆115Updated last week
- ☆204Updated 2 weeks ago
- YARA rule analyzer to improve rule quality and performance☆107Updated 7 months ago
- Memory Baseliner is a script that can compare two windows memory images or perform frequency of occurrence / data stacking analysis on mu…☆56Updated 2 years ago
- ☆26Updated 3 years ago
- Yara Rules for Modern Malware☆78Updated last year
- A Jupyter notebook to assist with the analysis of the output generated from Volatility memory extraction framework.☆97Updated 2 years ago
- A home for detection content developed by the delivr.to team☆73Updated 3 months ago
- Full of public notes and Utilities☆129Updated 9 months ago
- The Windows Malware Analysis Reversing Core Tools☆97Updated 4 years ago
- Initial triage of Windows Event logs☆103Updated last year
- JPCERT/CC public YARA rules repository☆110Updated last week
- The Github project for The Defender's Guide by Luke Paine and Jonathan Johnson☆159Updated 2 years ago
- Create a cool process tree like https://twitter.com/ACEResponder.☆35Updated 2 years ago
- WTF are these binaries doing?! A list of benign applications that mimic malicious behavior.☆165Updated 7 months ago
- Detection Engineering with YARA☆87Updated last year
- Active Directory Purple Team Playbook☆113Updated 2 years ago
- ☆255Updated last year
- ☆244Updated 5 months ago
- Scripts and tools accompanying HP Threat Research blog posts and reports.☆50Updated last year
- Pushes Sysmon Configs☆88Updated 4 years ago
- ☆68Updated 2 weeks ago
- A GUI to query the API of abuse.ch.☆70Updated 3 years ago
- Rules Shared by the Community from 100 Days of YARA 2023☆78Updated 2 years ago
- ShellSweeping the evil.☆53Updated last year