Alternatives and similar repositories for YaraSharp:

Users that are interested in YaraSharp are comparing it to the libraries listed below

• microsoft / libyara.NET
  .NET wrapper for libyara built in C++ CLI used to easily incorporate yara into .NET projects
  ☆52Updated 7 months ago
• herrcore / CmdDesktopSwitch
  CmdDesktopSwitch is a small utility that lists all windows desktops and provides the option to switch between them. This can be used to i…
  ☆34Updated 8 years ago
• FuzzySecurity / Driver-Template
  Bare template for a Kernel Mode Driver
  ☆51Updated 5 years ago
• djhohnstein / .NET-Profiler-DLL-Hijack
  Implementation of the .NET Profiler DLL hijack in C#
  ☆98Updated 6 years ago
• enkomio / RunDotNetDll
  A simple utility to list all methods of a given .NET Assembly and to invoke them
  ☆73Updated 3 years ago
• malcomvetter / WMIProcessWatcher
  An example pattern in C# for using WMI to monitor process creation and termination events.
  ☆52Updated 6 years ago
• malcomvetter / NamedPipes
  A pattern for client/server communication via Named Pipes via C#
  ☆96Updated 6 years ago
• Dewera / Pluto
  A manual system call library that supports functions from both ntdll.dll and win32u.dll
  ☆109Updated last year
• mandiant / jitm
  JITM is an automated tool to bypass the JIT Hooking protection on a .NET sample.
  ☆52Updated 4 years ago
• zodiacon / CLRExplorer
  Explore .NET Processes and Dump files
  ☆116Updated 4 years ago
• bytecode77 / bytecode-api
  Framework for C# development
  ☆72Updated this week
• AviAvni / NativeLeakDetector
  Win32 memory leak detector with ETW
  ☆41Updated 7 years ago
• OmerYa / Named-Pipe-Sniffer
  Mario & Luigi - Tools for sniffing Windows Named Pipes communication
  ☆129Updated 8 years ago
• zodiacon / DotNextSP2019
  DotNext 2019 St. Petersburg Talk Demos
  ☆40Updated 5 years ago
• TheWover / EasyNet
  Simple packer for arbitrary data using only .NET API calls. Produces a unique signature with every usage. Standalone program and library.…
  ☆91Updated 5 years ago
• EricZimmerman / RegistryPlugins
  ☆62Updated 3 weeks ago
• hasherezade / pe2pic
  Small visualizator for PE files
  ☆67Updated last year
• airbus-cert / dnYara
  A multi-platform .Net wrapper library for the native Yara library.
  ☆38Updated last year
• secana / CertDump
  Dump certificates from PE files in different formats
  ☆38Updated last year
• endgameinc / ClrGuard
  ☆213Updated 6 years ago
• WalkingCat / SymDiff
  Diff tool for comparing symbols in PDB files
  ☆84Updated 5 years ago
• adamkramer / jmp2it
  Transfer EIP control to shellcode during malware analysis investigation
  ☆75Updated 10 years ago
• hasherezade / libpeconv_tpl
  A ready-made template for a project based on libpeconv.
  ☆46Updated last month
• TheWover / Manager
  Library of tools and examples for loading/bootstrapping managed code from unmanaged code in .NET
  ☆63Updated 5 years ago
• RichHeaderResearch / RichPE
  Metadata hash incorporating the Rich Header for robustness against packing and other malware tricks
  ☆64Updated 3 years ago
• TheWover / ModuleMonitor
  Uses WMI Event Win32_ModuleLoadTrace to monitor module loading. Provides filters, and detailed data. Has an option to monitor for CLR Inj…
  ☆41Updated 5 years ago
• wireless90 / ProcessInjector.NET
  Learning Process Injection and Hollowing techniques
  ☆41Updated 2 years ago
• ITAYC0HEN / SUNBURST-Cracked
  The following repository contains a modified version of SUNBURST with cracekd hashes, comments and annotations.
  ☆56Updated 4 years ago
• psmitty7373 / eif
  Evil Reflective DLL Injection Finder
  ☆47Updated 6 years ago
• zodiacon / DotNetExp
  ☆43Updated last year