Alternatives and similar repositories for ssdeep

Users that are interested in ssdeep are comparing it to the libraries listed below

• VirusTotal / yara-python
  The Python interface for YARA
  ☆710Updated 4 months ago
• Neo23x0 / yarGen
  yarGen is a generator for YARA rules
  ☆1,719Updated 6 months ago
• eset / malware-ioc
  Indicators of Compromises (IOC) of our various investigations
  ☆1,857Updated last week
• mandiant / capa-rules
  Standard collection of rules for capa: the tool for enumerating the capabilities of programs
  ☆634Updated 2 weeks ago
• CERT-Polska / drakvuf-sandbox
  DRAKVUF Sandbox - automated hypervisor-level malware analysis system
  ☆1,206Updated last week
• Rurik / Noriben
  Noriben - Portable, Simple, Malware Analysis Sandbox
  ☆1,194Updated 2 months ago
• trendmicro / tlsh
  ☆804Updated last year
• JusticeRage / Manalyze
  A static analyzer for PE executables.
  ☆1,083Updated last year
• tklengyel / drakvuf
  DRAKVUF Black-box Binary Analysis
  ☆1,167Updated last week
• reversinglabs / reversinglabs-yara-rules
  ReversingLabs YARA Rules
  ☆858Updated 2 weeks ago
• BayshoreNetworks / yextend
  Yara integrated software to handle archive file data.
  ☆316Updated 3 years ago
• decalage2 / ViperMonkey
  A VBA parser and emulation engine to analyze malicious macros.
  ☆1,108Updated last year
• MBCProject / mbc-markdown
  MBC content in markdown
  ☆481Updated 4 months ago
• rowingdude / analyzeMFT
  analyzeMFT.py is designed to fully parse the MFT file from an NTFS filesystem and present the results as accurately as possible in multip…
  ☆500Updated last month
• Neo23x0 / yarAnalyzer
  Yara Rule Analyzer and Statistics
  ☆388Updated 2 years ago
• guelfoweb / peframe
  PEframe is a open source tool to perform static analysis on Portable Executable malware and malicious MS Office documents.
  ☆615Updated 3 years ago
• mandiant / flare-fakenet-ng
  FakeNet-NG - Next Generation Dynamic Network Analysis Tool
  ☆2,011Updated last month
• KasperskyLab / klara
  Kaspersky's GReAT KLara
  ☆716Updated last year
• ctxis / CAPE
  Malware Configuration And Payload Extraction
  ☆760Updated 10 months ago
• cert-ee / cuckoo3
  Cuckoo3 is a Python 3 open source automated malware analysis system.
  ☆767Updated 3 months ago
• log2timeline / plaso
  Super timeline all the things
  ☆1,938Updated 3 weeks ago
• buffer / thug
  Python low-interaction honeyclient
  ☆1,020Updated this week
• libyal / libewf
  Libewf is a library to access the Expert Witness Compression Format (EWF)
  ☆287Updated last year
• CERT-Polska / karton
  Distributed malware processing framework based on Python, Redis and S3.
  ☆441Updated this week
• mikesxrs / Open-Source-YARA-rules
  YARA Rules I come across on the internet
  ☆351Updated last year
• ForensicArtifacts / artifacts
  Digital Forensics artifact repository
  ☆1,163Updated 3 weeks ago
• hatching / vmcloak
  Automated Virtual Machine Generation and Cloaking for Cuckoo Sandbox.
  ☆507Updated last year
• certsocietegenerale / fame
  FAME Automates Malware Evaluation
  ☆909Updated last week
• DidierStevens / DidierStevensSuite
  Please no pull requests for this repository. Thanks!
  ☆2,322Updated 2 weeks ago
• Neo23x0 / signature-base
  YARA signature and IOC database for my scanners and tools
  ☆2,758Updated last week