stellarbear / YaraSharpLinks
C# wrapper around the Yara pattern matching library
☆40Updated 3 years ago
Alternatives and similar repositories for YaraSharp
Users that are interested in YaraSharp are comparing it to the libraries listed below
Sorting:
- .NET wrapper for libyara built in C++ CLI used to easily incorporate yara into .NET projects☆54Updated 10 months ago
- A simple utility to list all methods of a given .NET Assembly and to invoke them☆74Updated 3 years ago
- JITM is an automated tool to bypass the JIT Hooking protection on a .NET sample.☆54Updated 4 years ago
- An example pattern in C# for using WMI to monitor process creation and termination events.☆52Updated 6 years ago
- ☆43Updated last year
- CmdDesktopSwitch is a small utility that lists all windows desktops and provides the option to switch between them. This can be used to i…☆35Updated 9 years ago
- Implementation of the .NET Profiler DLL hijack in C#☆98Updated 6 years ago
- Framework for C# development☆71Updated last month
- A Proof-of-Concept implementation for Proxy Object Obfuscation in .NET☆48Updated 2 years ago
- A multi-platform .Net wrapper library for the native Yara library.☆38Updated last year
- Dump certificates from PE files in different formats☆38Updated last year
- ☆24Updated last year
- Learning Process Injection and Hollowing techniques☆41Updated 2 years ago
- A simple C# executable that invokes an arbitrary method of an arbitrary C# DLL☆135Updated last year
- The evolution of NxRansomware☆10Updated 5 years ago
- Bare template for a Kernel Mode Driver☆51Updated 5 years ago
- Clone running process with ZwCreateProcess☆57Updated 4 years ago
- .NET library for hooking and dumping Clr☆42Updated 11 months ago
- Win32 memory leak detector with ETW☆45Updated 7 years ago
- .NET wrapper for dbghelp.dll☆21Updated 5 years ago
- A Microsoft Windows service to provide telemetry on Windows executable memory page changes to facilitate threat detection☆31Updated 4 years ago
- Metadata hash incorporating the Rich Header for robustness against packing and other malware tricks☆65Updated 3 years ago
- Analyzers for Portable Executable anomalies and other malware behavior.☆32Updated 11 months ago
- .NET instrumentation framework☆72Updated 7 years ago
- Explore .NET Processes and Dump files☆119Updated 4 years ago
- $MFT parser (from live systems or a copy of the $MFT) and raw file copy utility☆36Updated 10 months ago
- Lnk file parser☆87Updated last week
- ☆22Updated 4 years ago
- PowerShell Module for the Antimalware Scan Interface (AMSI)☆25Updated 8 years ago
- .NET executable packer☆63Updated 6 years ago