Alternatives and similar repositories for YaraSharp:

Users that are interested in YaraSharp are comparing it to the libraries listed below

• microsoft / libyara.NET
  .NET wrapper for libyara built in C++ CLI used to easily incorporate yara into .NET projects
  ☆54Updated 9 months ago
• AviAvni / NativeLeakDetector
  Win32 memory leak detector with ETW
  ☆41Updated 7 years ago
• FuzzySecurity / Driver-Template
  Bare template for a Kernel Mode Driver
  ☆51Updated 5 years ago
• herrcore / CmdDesktopSwitch
  CmdDesktopSwitch is a small utility that lists all windows desktops and provides the option to switch between them. This can be used to i…
  ☆35Updated 8 years ago
• bytecode77 / bytecode-api
  Framework for C# development
  ☆71Updated this week
• enkomio / RunDotNetDll
  A simple utility to list all methods of a given .NET Assembly and to invoke them
  ☆74Updated 3 years ago
• malcomvetter / WMIProcessWatcher
  An example pattern in C# for using WMI to monitor process creation and termination events.
  ☆52Updated 6 years ago
• secana / CertDump
  Dump certificates from PE files in different formats
  ☆38Updated last year
• mandiant / jitm
  JITM is an automated tool to bypass the JIT Hooking protection on a .NET sample.
  ☆52Updated 4 years ago
• djhohnstein / .NET-Profiler-DLL-Hijack
  Implementation of the .NET Profiler DLL hijack in C#
  ☆98Updated 6 years ago
• zodiacon / CLRExplorer
  Explore .NET Processes and Dump files
  ☆118Updated 4 years ago
• warferik / AssemblyRunner
  C# Exe that can remotely retrieve C# assemblies for in-memory execution
  ☆19Updated 6 years ago
• zodiacon / DotNetExp
  ☆43Updated last year
• TheWover / ModuleMonitor
  Uses WMI Event Win32_ModuleLoadTrace to monitor module loading. Provides filters, and detailed data. Has an option to monitor for CLR Inj…
  ☆41Updated 6 years ago
• OmerYa / Named-Pipe-Sniffer
  Mario & Luigi - Tools for sniffing Windows Named Pipes communication
  ☆129Updated 8 years ago
• EricZimmerman / Lnk
  Lnk file parser
  ☆86Updated 3 months ago
• secana / PeNet-Analyzer
  Analyzers for Portable Executable anomalies and other malware behavior.
  ☆32Updated 10 months ago
• zodiacon / DotNextSP2019
  DotNext 2019 St. Petersburg Talk Demos
  ☆40Updated 5 years ago
• nccgroup / WindowsMemPageDelta
  A Microsoft Windows service to provide telemetry on Windows executable memory page changes to facilitate threat detection
  ☆31Updated 4 years ago
• TheWover / EasyNet
  Simple packer for arbitrary data using only .NET API calls. Produces a unique signature with every usage. Standalone program and library.…
  ☆91Updated 6 years ago
• adamdriscoll / AMSI
  PowerShell Module for the Antimalware Scan Interface (AMSI)
  ☆25Updated 8 years ago
• mattifestation / CatalogTools
  A PowerShell module to assist in parsing and managing catalog files.
  ☆21Updated 8 years ago
• hasherezade / pe2pic
  Small visualizator for PE files
  ☆69Updated last year
• suto1987 / AlphaFS
  AlphaFS is a .NET library providing more complete Win32 file system functionality to the .NET platform than the standard System.IO classe…
  ☆10Updated 3 years ago
• hasherezade / tag_converter
  ☆22Updated 4 years ago
• themeldingwars / Be.HexEditor
  A modified fork of Be.HexEditor for use in debug tools
  ☆15Updated 3 years ago
• ITAYC0HEN / SUNBURST-Cracked
  The following repository contains a modified version of SUNBURST with cracekd hashes, comments and annotations.
  ☆56Updated 4 years ago
• airbus-cert / dnYara
  A multi-platform .Net wrapper library for the native Yara library.
  ☆38Updated last year
• WalkingCat / SymDiff
  Diff tool for comparing symbols in PDB files
  ☆82Updated 5 years ago
• Dewera / Pluto
  A manual system call library that supports functions from both ntdll.dll and win32u.dll
  ☆110Updated 2 years ago