Alternatives and similar repositories for avml:

Users that are interested in avml are comparing it to the libraries listed below

• omerbenamram / evtx
  A Fast (and safe) parser for the Windows XML Event Log (EVTX) format
  ☆714Updated 2 months ago
• Velocidex / WinPmem
  The multi-platform memory acquisition tool.
  ☆719Updated last month
• mandiant / capa-rules
  Standard collection of rules for capa: the tool for enumerating the capabilities of programs
  ☆556Updated this week
• keydet89 / RegRipper3.0
  RegRipper3.0
  ☆567Updated last month
• tclahr / uac
  UAC is a Live Response collection script for Incident Response that makes use of native binaries and tools to automate the collection of …
  ☆838Updated this week
• reversinglabs / reversinglabs-yara-rules
  ReversingLabs YARA Rules
  ☆780Updated last month
• VirusTotal / yara-x
  A rewrite of YARA in Rust.
  ☆693Updated this week
• advanced-threat-research / Yara-Rules
  Repository of YARA rules made by Trellix ATR Team
  ☆574Updated last year
• ForensicArtifacts / artifacts
  Digital Forensics artifact repository
  ☆1,079Updated 3 weeks ago
• CERT-Polska / karton
  Distributed malware processing framework based on Python, Redis and S3.
  ☆397Updated 2 months ago
• eset / malware-ioc
  Indicators of Compromises (IOC) of our various investigations
  ☆1,712Updated last month
• CERT-Polska / drakvuf-sandbox
  DRAKVUF Sandbox - automated hypervisor-level malware analysis system
  ☆1,084Updated last month
• volatilityfoundation / community
  Volatility plugins developed and maintained by the community
  ☆351Updated 3 years ago
• target / strelka
  Real-time, container-based file scanning at enterprise scale
  ☆893Updated last month
• VirusTotal / yara-python
  The Python interface for YARA
  ☆671Updated last month
• fox-it / dissect
  Dissect is a digital forensics & incident response framework and toolset that allows you to quickly access and analyse forensic artefacts…
  ☆945Updated last month
• 0xrawsec / whids
  Open Source EDR for Windows
  ☆1,168Updated last year
• kevoreilly / CAPEv2
  Malware Configuration And Payload Extraction
  ☆2,109Updated this week
• decalage2 / ViperMonkey
  A VBA parser and emulation engine to analyze malicious macros.
  ☆1,064Updated 6 months ago
• microsoft / SysmonForLinux
  Sysmon for Linux
  ☆1,790Updated this week
• Neo23x0 / yarGen
  yarGen is a generator for YARA rules
  ☆1,586Updated 7 months ago
• StrangerealIntel / CyberThreatIntel
  Analysis of malware and Cyber Threat Intel of APT and cybercriminals groups
  ☆707Updated 2 years ago
• EricZimmerman / KapeFiles
  This repository serves as a place for community created Targets and Modules for use with KAPE.
  ☆667Updated 2 weeks ago
• volexity / threat-intel
  Signatures and IoCs from public Volexity blog posts.
  ☆344Updated last month
• mandiant / flare-fakenet-ng
  FakeNet-NG - Next Generation Dynamic Network Analysis Tool
  ☆1,834Updated last month
• google / rekall
  Rekall Memory Forensic Framework
  ☆1,932Updated 4 years ago
• binref / refinery
  High Octane Triage Analysis
  ☆693Updated this week
• Neo23x0 / signature-base
  YARA signature and IOC database for my scanners and tools
  ☆2,525Updated last month
• ION28 / BLUESPAWN
  An Active Defense and EDR software to empower Blue Teams
  ☆1,249Updated last year
• sophoslabs / IoCs
  Sophos-originated indicators-of-compromise from published reports
  ☆551Updated 3 weeks ago