Alternatives and similar repositories for CaptureBAT-client:

Users that are interested in CaptureBAT-client are comparing it to the libraries listed below

• zodiacon / Blog
  Blog posts
  ☆30Updated 4 years ago
• ctxis / capemon
  CAPE monitor DLLs
  ☆39Updated 5 years ago
• MathildeVenault / SysMainView
  This tool is the result of a reverse engineering process of the Windows service called SysMain. Time to interact with the prefetch files …
  ☆30Updated 4 years ago
• mandiant / win10_rekall
  Rekall Memory Forensic Framework
  ☆31Updated 5 years ago
• Dump-GUY / Python3---Binary-Data-Manipulation
  Python 3 - Manipulation and conversation with different data type (Bytes operations)
  ☆27Updated 3 years ago
• 4n6ist / usn_analytics
  It's not just UsnJrnl (USN Journal Records/Change Journal Records) parser.
  ☆23Updated 6 years ago
• sysopfb / Unpackers
  My collection of unpackers for malware packers/crypters
  ☆28Updated 7 years ago
• dungtv543 / Dutas
  Analysis PE file or Shellcode
  ☆49Updated 8 years ago
• hasherezade / tag_converter
  ☆22Updated 4 years ago
• nettitude / DLLInjection
  DLL Injection Library & Tools
  ☆72Updated 8 years ago
• Tera0017 / TAFOF-Unpacker
  TA505 unpacker Python 2.7
  ☆47Updated 4 years ago
• Techlord-RCE / VB-Exe-Parser
  VB Exe Parser is an IDA script written in Python. This script will help you to parse VB program internal structures. It can find: Event, …
  ☆16Updated 8 years ago
• zodiacon / DotNextSP2019
  DotNext 2019 St. Petersburg Talk Demos
  ☆38Updated 5 years ago
• hasherezade / loaderine
  A demo implementation of a well-known technique used by some malware to evade userland hooking, using my library: libpeconv.
  ☆19Updated 6 years ago
• marcusbotacin / Anti.Analysis
  Malware Analysis, Anti-Analysis, and Anti-Anti-Analysis
  ☆45Updated 7 years ago
• papadp / reflective-injection-detection
  a program to detect reflective dll injection on a live machine
  ☆75Updated 9 years ago
• psmitty7373 / eif
  Evil Reflective DLL Injection Finder
  ☆47Updated 6 years ago
• Dump-GUY / CAPA_JsonConver
  Converts exported results of CAPA tool from .json format to another formats supporting by different tools.
  ☆22Updated 3 years ago
• nccgroup / WindowsMemPageDelta
  A Microsoft Windows service to provide telemetry on Windows executable memory page changes to facilitate threat detection
  ☆31Updated 4 years ago
• hotnops / RemoteDebugView
  A DLL that serves OutputDebugString content over a TCP connection
  ☆35Updated 3 years ago
• herrcore / CmdDesktopSwitch
  CmdDesktopSwitch is a small utility that lists all windows desktops and provides the option to switch between them. This can be used to i…
  ☆34Updated 8 years ago
• naxonez / YaraRules
  Yaras Random
  ☆20Updated 6 years ago
• cryptogramfan / Malware-Analysis-Scripts
  Handy scripts to speed up malware analysis
  ☆35Updated last year
• securesean / Shim-Process-Scanner
  Windows x64 Process Scanner to detect application compatability shims
  ☆37Updated 6 years ago
• deroko / activationcontexthook
  ☆33Updated 7 years ago
• waleedassar / TimeDateStamp
  Discover TimeDateStamps In PE File
  ☆17Updated 9 years ago
• hasherezade / hidden_bee_tools
  Parser for a custom executable format from Hidden Bee malware (first stage)
  ☆39Updated 5 months ago
• telsy-cyberops / research
  Telsy CTI Research Team
  ☆57Updated 4 years ago
• seifreed / awesome-sandbox-evasion
  A summary about different projects/presentations/tools to test how to evade malware sandbox systems
  ☆48Updated 6 years ago
• hailehong95 / practice-maldev
  Common Malware Techniques
  ☆13Updated last year