Alternatives and similar repositories for CaptureBAT-client:

Users that are interested in CaptureBAT-client are comparing it to the libraries listed below

• zodiacon / Blog
  Blog posts
  ☆30Updated 4 years ago
• adamkramer / jmp2it
  Transfer EIP control to shellcode during malware analysis investigation
  ☆75Updated 10 years ago
• herrcore / CmdDesktopSwitch
  CmdDesktopSwitch is a small utility that lists all windows desktops and provides the option to switch between them. This can be used to i…
  ☆35Updated 8 years ago
• hasherezade / tag_converter
  ☆22Updated 4 years ago
• mandiant / win10_rekall
  Rekall Memory Forensic Framework
  ☆32Updated 5 years ago
• ctxis / capemon
  CAPE monitor DLLs
  ☆39Updated 5 years ago
• hasherezade / decryptors_archive
  Archive of ransomware decryptors
  ☆29Updated 7 years ago
• MathildeVenault / SysMainView
  This tool is the result of a reverse engineering process of the Windows service called SysMain. Time to interact with the prefetch files …
  ☆31Updated 4 years ago
• telsy-cyberops / research
  Telsy CTI Research Team
  ☆57Updated 4 years ago
• nettitude / DLLInjection
  DLL Injection Library & Tools
  ☆72Updated 8 years ago
• psmitty7373 / eif
  Evil Reflective DLL Injection Finder
  ☆47Updated 6 years ago
• cryptogramfan / Malware-Analysis-Scripts
  Handy scripts to speed up malware analysis
  ☆35Updated last year
• 4n6ist / usn_analytics
  It's not just UsnJrnl (USN Journal Records/Change Journal Records) parser.
  ☆23Updated 6 years ago
• intezer / analyze-scripts
  ☆26Updated last year
• mrexodia / YaraGen
  Plugin for x64dbg to generate Yara rules from function basic blocks.
  ☆36Updated 7 years ago
• sysopfb / Unpackers
  My collection of unpackers for malware packers/crypters
  ☆28Updated 7 years ago
• hasherezade / flareon2019
  Flare-On solutions
  ☆36Updated 5 years ago
• Tera0017 / TAFOF-Unpacker
  TA505 unpacker Python 2.7
  ☆47Updated 4 years ago
• hasherezade / process_chameleon
  A process overwriting its own PEB to make an illusion that it has been loaded from a different path.
  ☆96Updated 3 years ago
• OsandaMalith / ApiMon
  A simple API monitor for Windbg
  ☆63Updated 8 years ago
• papadp / reflective-injection-detection
  a program to detect reflective dll injection on a live machine
  ☆75Updated 9 years ago
• Dump-GUY / Python3---Binary-Data-Manipulation
  Python 3 - Manipulation and conversation with different data type (Bytes operations)
  ☆26Updated 3 years ago
• ohjeongwook / ShellCodeEmulator
  Shellcode emulator written with Unicorn Framework With Process Dump Emulation Environment
  ☆121Updated 4 years ago
• securesean / Shim-Process-Scanner
  Windows x64 Process Scanner to detect application compatability shims
  ☆37Updated 6 years ago
• ignacioj / mftf
  $MFT parser (from live systems or a copy of the $MFT) and raw file copy utility
  ☆36Updated 9 months ago
• mr-tz / idapython
  IDAPython scripts
  ☆15Updated 7 years ago
• deroko / SPPLUAObjectUacBypass
  ☆45Updated 6 years ago
• hasherezade / hidden_bee_tools
  Parser for a custom executable format from Hidden Bee malware (first stage)
  ☆43Updated 7 months ago
• RichHeaderResearch / RichPE
  Metadata hash incorporating the Rich Header for robustness against packing and other malware tricks
  ☆64Updated 3 years ago
• ohjeongwook / PowerShellRunBox
  Dynamic PowerShell Analysis Framework Based Upon PowerShell Debugging Functionality
  ☆83Updated 2 years ago