rabbitstack / fibratusLinks
Adversary tradecraft detection, protection, and hunting
☆2,400Updated last month
Alternatives and similar repositories for fibratus
Users that are interested in fibratus are comparing it to the libraries listed below
Sorting:
- Windows kernel and user mode emulation.☆1,803Updated 2 weeks ago
- FLARE Obfuscated String Solver - Automatically extract obfuscated strings from malware.☆3,806Updated 2 weeks ago
- Scans all running processes. Recognizes and dumps a variety of potentially malicious implants (replaced/implanted PEs, shellcodes, hooks,…☆2,280Updated last month
- The FLARE team's open-source tool to identify capabilities in executable files.☆5,700Updated last week
- FakeNet-NG - Next Generation Dynamic Network Analysis Tool☆2,043Updated last week
- Collaborative Malware Analysis Platform at Scale☆769Updated last month
- Scans a given process. Recognizes and dumps a variety of potentially malicious implants (replaced/injected PEs, shellcodes, hooks, in-mem…☆3,502Updated last month
- Python module for viewing Portable Executable (PE) files in a tree-view using pefile and PyQt5. Can also be used with IDA Pro and Rekall …☆1,337Updated 3 years ago
- A static analyzer for PE executables.☆1,094Updated last year
- VirusTotal Wanna Be - Now with 100% more Hipster☆1,698Updated 2 years ago
- Set of tools to analyze Windows sandboxes for exposed attack surface.☆2,254Updated last month
- Python scriptable Reverse Engineering Sandbox, a Virtual Machine instrumentation and inspection framework based on QEMU☆1,679Updated last year
- DRAKVUF Sandbox - automated hypervisor-level malware analysis system☆1,251Updated last week
- A Pin Tool for tracing API calls etc☆1,592Updated 3 weeks ago
- DRAKVUF Black-box Binary Analysis☆1,187Updated last month
- HackSys Extreme Vulnerable Driver (HEVD) - Windows & Linux☆2,907Updated 9 months ago
- Noriben - Portable, Simple, Malware Analysis Sandbox☆1,209Updated 4 months ago
- Malwoverview is a first response tool used for threat hunting and offers intel information from Virus Total, Hybrid Analysis, URLHaus, Po…☆3,475Updated last month
- Portable Executable reversing tool with a friendly GUI☆3,401Updated last month
- wtf is a distributed, code-coverage guided, customizable, cross-platform snapshot-based fuzzer designed for attacking user and / or kerne…☆1,703Updated last month
- Rapidly Search and Hunt through Windows Forensic Artefacts☆3,403Updated 2 months ago
- A fork of AFL for fuzzing Windows binaries☆2,502Updated 2 weeks ago
- Malware Configuration And Payload Extraction☆2,858Updated this week
- Diaphora, the most advanced Free and Open Source program diffing tool.☆4,124Updated last year
- Open EDR public repository☆2,573Updated last year
- AVML - Acquire Volatile Memory for Linux☆1,029Updated last week
- Rekall Memory Forensic Framework☆1,990Updated 5 years ago
- pefile is a Python module to read and work with PE (Portable Executable) files☆1,997Updated last year
- A Coverage Explorer for Reverse Engineers☆2,472Updated last year
- MemProcFS☆3,924Updated 2 weeks ago