snapattack / bpfdoor-scannerLinks
BPFDoor Scanner - Check for Compromised Hosts
☆40Updated 3 years ago
Alternatives and similar repositories for bpfdoor-scanner
Users that are interested in bpfdoor-scanner are comparing it to the libraries listed below
Sorting:
- 오펜시브 시큐리티 TTP, 정보, 그리고 대응 방안을 분석하고 공유하는 프로젝트입니다. 정보보안 업계 종사자들과 학생들에게 도움이 되었으면 좋겠습니다.☆66Updated 5 months ago
- ☆11Updated 4 years ago
- Python wrappers for mal_unpack☆37Updated 2 years ago
- Easy to extend initial access scenario to help with EDR testing on Linux and Mac☆24Updated 3 years ago
- A library and cli tool to extract HWP files.☆24Updated 8 months ago
- YARI is an interactive debugger for YARA Language.☆89Updated 2 weeks ago
- Decloak Linux stealth rootkits hiding data with this simple memory mapped IO investigation tool.☆25Updated 2 years ago
- Timestomper and Timestamp checker with nanosecond accuracy for NTFS volumes☆52Updated 4 years ago
- MITRE TTPs derived from Conti's leaked playbooks from XSS.IS☆39Updated 3 years ago
- ☆27Updated 3 years ago
- Royal Road RTF Weaponizer object decoder☆24Updated last year
- A scanner that files with compromised or untrusted code signing certificates written in python.☆65Updated 2 years ago
- Quick analysis focusing on most important of a Malware or a Threat☆41Updated 2 years ago
- Static Decryptor for IcedID Malware☆18Updated 2 years ago
- ☆65Updated 3 years ago
- Modular malware analysis artifact collection and correlation framework☆53Updated last year
- Yara Rules for Modern Malware☆79Updated last year
- Surface Analysis System on Cloud☆19Updated last year
- A powershell parser for https://github.com/ufrisk/MemProcFS☆44Updated 4 years ago
- Malware Muncher is a proof-of-concept Python script that utilizes the Frida framework for binary instrumentation and API hooking, enablin…☆46Updated 2 years ago
- At some point, I learned about a method to perform a binary search on a file in order to identify its AV signature and change it to bypas…☆35Updated 5 years ago
- My Malware Analysis Reports☆23Updated 3 years ago
- Rapidly building a Windows 10 system to use for dynamic malware analysis (sandbox), sending data to Elastic Cloud.☆50Updated 2 years ago
- ☆37Updated 6 months ago
- 🚧 Currently transfering TLP:CLEAR rules from TLP:AMBER repository...☆21Updated last year
- ☆28Updated 4 years ago
- ☆37Updated 3 years ago
- Renamed to Free EDR to avoid confusion with Comodo's project☆26Updated 2 years ago
- The repository accompanying the Buer Emulation workshop☆24Updated 4 years ago
- Script for automating Linux memory capture and analysis☆13Updated 5 years ago