Alternatives and similar repositories for CaptureBAT-client:

Users that are interested in CaptureBAT-client are comparing it to the libraries listed below

• mandiant / win10_rekall
  Rekall Memory Forensic Framework
  ☆29Updated 5 years ago
• psmitty7373 / eif
  Evil Reflective DLL Injection Finder
  ☆45Updated 6 years ago
• MathildeVenault / SysMainView
  This tool is the result of a reverse engineering process of the Windows service called SysMain. Time to interact with the prefetch files …
  ☆30Updated 4 years ago
• nettitude / DLLInjection
  DLL Injection Library & Tools
  ☆71Updated 8 years ago
• papadp / reflective-injection-detection
  a program to detect reflective dll injection on a live machine
  ☆74Updated 9 years ago
• zodiacon / Blog
  Blog posts
  ☆30Updated 4 years ago
• libyal / libfwevt
  Library for Windows XML Event Log (EVTX) data types
  ☆17Updated 3 months ago
• herrcore / CmdDesktopSwitch
  CmdDesktopSwitch is a small utility that lists all windows desktops and provides the option to switch between them. This can be used to i…
  ☆33Updated 8 years ago
• hasherezade / tag_converter
  ☆22Updated 3 years ago
• fbruzzaniti / Capture-Py
  Capture-Py is a malware analysis tool that makes a copy of any files deleted or modified in a given directory and sub-directories. It was…
  ☆23Updated 7 years ago
• Paul-Tew / lifer
  Windows link file (shortcuts) examiner
  ☆67Updated 7 months ago
• Tera0017 / TAFOF-Unpacker
  TA505 unpacker Python 2.7
  ☆47Updated 4 years ago
• telsy-cyberops / research
  Telsy CTI Research Team
  ☆57Updated 4 years ago
• airbus-cert / etwbreaker
  An IDA plugin to deal with Event Tracing for Windows (ETW)
  ☆51Updated 2 years ago
• mr-tz / idapython
  IDAPython scripts
  ☆15Updated 7 years ago
• alexander-hanel / gopep
  Go Lang Portable Executable Parser
  ☆38Updated 3 years ago
• zodiacon / DotNextSP2019
  DotNext 2019 St. Petersburg Talk Demos
  ☆37Updated 5 years ago
• OmerYa / Named-Pipe-Sniffer
  Mario & Luigi - Tools for sniffing Windows Named Pipes communication
  ☆129Updated 8 years ago
• yardenshafir / CallbackObjectAnalyzer
  Dumps information about all the callback objects found in a dump file and the functions registered for them
  ☆35Updated 4 years ago
• ohjeongwook / ShellCodeEmulator
  Shellcode emulator written with Unicorn Framework With Process Dump Emulation Environment
  ☆119Updated 4 years ago
• seifreed / awesome-sandbox-evasion
  A summary about different projects/presentations/tools to test how to evade malware sandbox systems
  ☆48Updated 6 years ago
• cryptogramfan / Malware-Analysis-Scripts
  Handy scripts to speed up malware analysis
  ☆35Updated last year
• 4n6ist / usn_analytics
  It's not just UsnJrnl (USN Journal Records/Change Journal Records) parser.
  ☆23Updated 6 years ago
• msuhanov / winmem_decompress
  Extract compressed memory pages from page-aligned data
  ☆42Updated 6 years ago
• marcusbotacin / Anti.Analysis
  Malware Analysis, Anti-Analysis, and Anti-Anti-Analysis
  ☆45Updated 7 years ago
• RichHeaderResearch / RichPE
  Metadata hash incorporating the Rich Header for robustness against packing and other malware tricks
  ☆63Updated 3 years ago
• ctxis / capemon
  CAPE monitor DLLs
  ☆39Updated 5 years ago
• newlog / r2com
  radare2 script to help on COM objects reverse engineering
  ☆11Updated 7 years ago
• hasherezade / pe2pic
  Small visualizator for PE files
  ☆67Updated last year
• tyranid / DumpReparsePoints
  This is a simple tool to dump all the reparse points on an NTFS volume.
  ☆31Updated 4 years ago