Alternatives and similar repositories for rvmi-qemu

Users that are interested in rvmi-qemu are comparing it to the libraries listed below

• mandiant / rvmi-kvm

  View on GitHub
  Linux-KVM with rVMI extensions
  ☆22Aug 28, 2017Updated 8 years ago
• mandiant / rvmi-rekall

  View on GitHub
  Rekall Forensics and Incident Response Framework with rVMI extensions
  ☆33Mar 25, 2021Updated 4 years ago
• mandiant / rvmi

  View on GitHub
  rVMI - A New Paradigm For Full System Analysis
  ☆359Oct 4, 2017Updated 8 years ago
• huku- / xde

  View on GitHub
  XED based Disassembly Engine
  ☆21Apr 23, 2018Updated 7 years ago
• mandiant / vivisect

  View on GitHub
  pure Python binary analysis framework
  ☆23Oct 26, 2018Updated 7 years ago
• sashs / tools

  View on GitHub
  Some tools
  ☆10Dec 5, 2017Updated 8 years ago
• elastic / sans-dfir-2022

  View on GitHub
  Repo with supporting material for the talk titled "Cracking the Beacon: Automating the extraction of implant configurations"
  ☆11Feb 6, 2025Updated last year
• Neo-Maoku / KillDriverProtect

  View on GitHub
  关闭恶意驱动的文件和注册表保护
  ☆14Jun 28, 2022Updated 3 years ago
• cldrn / metasploit-modules

  View on GitHub
  My metasploit modules
  ☆11Jul 7, 2015Updated 10 years ago
• Arno0x / NmapScripts

  View on GitHub
  Collection of Nmap scripts
  ☆10Nov 27, 2015Updated 10 years ago
• mandiant / Volatility-Plugins

  View on GitHub
  ☆82Jul 5, 2016Updated 9 years ago
• Antonlovesdnb / SANSTHS2021

  View on GitHub
  Hunting Malicious Macros SANS Threathunting Summit 2021 Materials
  ☆39Oct 9, 2021Updated 4 years ago
• mandiant / unicorn-libemu-shim

  View on GitHub
  libemu shim layer and win32 environment for Unicorn Engine
  ☆73Apr 14, 2017Updated 8 years ago
• mandiant / DFUR-Splunk-App

  View on GitHub
  The "DFUR" Splunk application and data that was presented at the 2020 SANS DFIR Summit.
  ☆13Sep 9, 2020Updated 5 years ago
• advanced-threat-research / Threat-Reports

  View on GitHub
  Repository to store the Threat Reports made by the McAfee Enterprise ATR Team
  ☆10Oct 11, 2018Updated 7 years ago
• jaegeral / osint_to_timesketch

  View on GitHub
  Virustotal Data to Timesketch
  ☆16Feb 28, 2019Updated 6 years ago
• micrictor / disttrack

  View on GitHub
  Open-source decompilation of Disstrack
  ☆12Oct 18, 2016Updated 9 years ago
• mandiant / flare-kscldr

  View on GitHub
  FLARE Kernel Shellcode Loader
  ☆179May 3, 2019Updated 6 years ago
• sektioneins / WWCD

  View on GitHub
  What Would Capstone Decode - IDA plugin that implements a Capstone powered IDA view
  ☆57Nov 29, 2016Updated 9 years ago
• ALSchwalm / devirtualize

  View on GitHub
  ☆18Jan 25, 2017Updated 9 years ago
• stolenbytes / apcforthewin

  View on GitHub
  ☆16Sep 7, 2017Updated 8 years ago
• AirbusCyber / grap

  View on GitHub
  grap: define and match graph patterns within binaries
  ☆174Mar 3, 2021Updated 4 years ago
• malware-unicorn / MFTparser

  View on GitHub
  Encase Script to parse harddrive for MFT data
  ☆16Jun 17, 2016Updated 9 years ago
• mvelazc0 / Talks-Presentations

  View on GitHub
  Resource links (video, slides & code) for my conference talks | presentations | workshops
  ☆21Nov 17, 2025Updated 2 months ago
• rwfpl / rewolf-pcausa-exploit

  View on GitHub
  PCAUSA Rawether for Windows Local Privilege Escalation
  ☆39Mar 15, 2017Updated 8 years ago
• progmboy / kernel_vul_poc

  View on GitHub
  ☆31Jan 4, 2018Updated 8 years ago
• outflanknl / RedFile

  View on GitHub
  Serving files with conditions, serverside keying and more.
  ☆18May 26, 2022Updated 3 years ago
• jedisct1 / ipgrep

  View on GitHub
  Extract, defang, resolve names and IPs from text
  ☆23Jan 29, 2026Updated 2 weeks ago
• ambray / Ntfs

  View on GitHub
  Various libraries focused on examining/parsing NTFS-specific structures
  ☆16Oct 25, 2015Updated 10 years ago
• Winbagility / Winbagility

  View on GitHub
  [ARCHIVED] mov rax, ${Thalium/IceBox}; jmp rax;
  ☆76Jun 8, 2019Updated 6 years ago
• Cryptogenic / MD5-Magic-File-Generator

  View on GitHub
  A project in Golang that will create prefix-based magic MD5 hashes for type juggling.
  ☆20Jul 29, 2018Updated 7 years ago
• n3l5 / irMempull

  View on GitHub
  PowerShell Memory Pulling script
  ☆19Mar 24, 2015Updated 10 years ago
• Dankirk / cve-2017-0065

  View on GitHub
  Exploiting Edge's read:// urlhandler
  ☆15Oct 23, 2021Updated 4 years ago
• helpsystems / Agafi

  View on GitHub
  A gadget finder and a ROP-Chainer tool for x86 platforms
  ☆95Jun 13, 2021Updated 4 years ago
• Cisco-Talos / CASC

  View on GitHub
  ☆44Sep 12, 2018Updated 7 years ago
• HackingThings / SuperSneakyExec

  View on GitHub
  Loading and executing shellcode in C# without PInvoke.
  ☆22Jan 10, 2022Updated 4 years ago
• TACIXAT / portable-executable-library

  View on GitHub
  Automatically exported from code.google.com/p/portable-executable-library
  ☆22Oct 5, 2019Updated 6 years ago
• flankerhqd / cve-2015-6612poc-forM

  View on GitHub
  ☆16Nov 16, 2015Updated 10 years ago
• malwares / torCT-PHP-RAT

  View on GitHub
  This is a release of the torCT PHP RAT for people willing to research RATs and how they work.
  ☆18Dec 3, 2015Updated 10 years ago