Decloak Linux stealth rootkits hiding data with this simple memory mapped IO investigation tool.
☆29Sep 29, 2025Updated last year
Alternatives and similar repositories for sandfly-file-decloak
Users that are interested in sandfly-file-decloak are comparing it to the libraries listed below. We may earn a commission when you buy through links labeled 'Ad' on this page.
Sorting:
- Sandfly Linux Stealth Rootkit Decloaking Utility☆112Jan 19, 2023Updated 3 years ago
- Linux #rootkit and #malware revealer☆31Aug 1, 2024Updated 2 years ago
- Library of blueprints usable in MISP Workflows☆14Jul 31, 2023Updated 3 years ago
- yet another hidden LKM hunter☆32Sep 18, 2025Updated last year
- Entropy scanner for Linux to detect packed or encrypted binaries related to malware. Finds malicious files and Linux processes and gives …☆171Jun 11, 2024Updated 2 years ago
- Managed Kubernetes at scale on DigitalOcean • AdDigitalOcean Kubernetes includes the control plane, bandwidth allowance, container registry, automatic updates, and more for free.
- Just Another broken Registry Parser (JARP)☆16May 23, 2024Updated 2 years ago
- General Content☆28Jul 28, 2026Updated 3 months ago
- Simple CLI utility to save off an image from every webcam hooked into a mac☆14May 20, 2021Updated 5 years ago
- THOR APT Scanner User Manual☆24Oct 27, 2026Updated last week
- Tools for ossec equivalent intrusion detection and audit for osquery.☆11Jun 2, 2017Updated 9 years ago
- Forensic cheatsheets for use with cheat☆16Dec 2, 2021Updated 4 years ago
- A tool designed to extract data from a logical ReFS 3.4 forensic image produced by FTK Imager☆18Nov 22, 2023Updated 2 years ago
- ☆14Dec 24, 2019Updated 6 years ago
- MISP to Microsoft Defender integration☆19Jul 9, 2026Updated 3 months ago
- Deploy on Railway without the complexity - Free Credits Offer • AdConnect your repo and Railway handles the rest with instant previews. Quickly provision container image services, databases, and storage volumes.
- Helper scripts to automate the extraction of YARA rules from XProtectRemediators☆22Mar 5, 2024Updated 2 years ago
- ☆11Sep 26, 2019Updated 7 years ago
- Stable version of Unhide☆199Aug 12, 2025Updated last year
- Public tools, scripts or code snippets that can help when working with our products☆48Updated this week
- Osquery Resources☆64Aug 23, 2019Updated 7 years ago
- ebpfkit-monitor is a tool that detects and protects against eBPF powered rootkits☆145Feb 28, 2023Updated 3 years ago
- A Volatility plugin to detect hidden Linux Kernel Modules☆17Jul 11, 2025Updated last year
- ETW forensic tool for Volatility3 plugin☆17Nov 15, 2024Updated last year
- Sigma rules to share with the community☆126Jan 29, 2025Updated last year
- 1-Click AI Models by DigitalOcean Gradient • AdDeploy popular AI models on DigitalOcean Gradient GPU virtual machines with just a single click. Zero configuration with optimized deployments.
- Scripts and tools accompanying HP Threat Research blog posts and reports.☆50Apr 10, 2024Updated 2 years ago
- ☆15Dec 22, 2021Updated 4 years ago
- Python web app for previewing data in a Chrome Profile Folder☆28Jul 1, 2024Updated 2 years ago
- Wrapper for TSK (Sleuth Kit) Bindings☆11Jan 10, 2023Updated 3 years ago
- 🛡️ SIGMA Detection Engineering Platform A comprehensive AI-powered detection engineering platform for security teams to explore MITRE AT…☆44Jun 28, 2025Updated last year
- Menu for Thor scanner lite☆20Oct 24, 2025Updated last year
- Documentation and parsers for different anti-virus quarantine formats.☆43Dec 9, 2020Updated 5 years ago
- A network logging tool that logs per process activities☆33Jun 13, 2023Updated 3 years ago
- Web app built to allow digital forensic professionals to search for the forensic tools that will parse artifacts from various apps.☆25Oct 20, 2026Updated last week
- GPUs on demand by Runpod - Special Offer Available • AdRun AI, ML, and HPC workloads on powerful cloud GPUs—without limits or wasted spend. Deploy GPUs in under a minute and pay by the second.
- Harvest Linux forensic data for operational triage of an event.☆50Aug 3, 2026Updated 2 months ago
- Read-only Active Directory & Microsoft Entra ID hygiene auditor in pure PowerShell. Collect once, analyze offline: deterministic findings…☆21Oct 26, 2026Updated last week
- Generate realistic synthetic security logs for cybersecurity threat hunting training and research☆295Updated this week
- ALPHA/WIP for OSquery configuration for Mac and Linux Operating Systems☆16Jan 9, 2018Updated 8 years ago
- Make an Linux Kernel rootkit visible again.☆59Feb 27, 2025Updated last year
- Run Sigma detection rules on logs from the new MacOS EndpointSecurity Framework☆22Jan 22, 2021Updated 5 years ago
- ModTracer Finds Hidden Linux Kernel Rootkits and then make visible again.☆88Feb 28, 2025Updated last year