Alternatives and similar repositories for defender-recon24

Users that are interested in defender-recon24 are comparing it to the libraries listed below

• t-tani / defender2yara

  View on GitHub
  Convert Microsoft Defender Antivirus Signatures (VDM) into YARA rules
  ☆142Updated this week
• Neo-Maoku / KillDriverProtect

  View on GitHub
  关闭恶意驱动的文件和注册表保护
  ☆14Jun 28, 2022Updated 3 years ago
• hongson11698 / defender-database-extract

  View on GitHub
  defender_database
  ☆24Oct 31, 2023Updated 2 years ago
• s4dbrd / ETWReader

  View on GitHub
  Read ETW Provider events. Inspired by ETWExplorer by Pavel Yosifovich
  ☆17Jun 29, 2024Updated last year
• kyxiaxiang / DetectCobaltStrike

  View on GitHub
  Detect Beacon Powerful (Include CobatStrike 4.10 Aha~)
  ☆21Oct 18, 2024Updated last year
• Vector35 / pdb-rs

  View on GitHub
  A parser for Microsoft PDB (Program Database) debugging information
  ☆23Nov 5, 2024Updated last year
• expend20 / llvm-ob-passes

  View on GitHub
  ☆20Oct 14, 2024Updated last year
• Meckazin / HidingFromETW

  View on GitHub
  PoC for detecting and evading ETW detection of .Net Assembly.Load
  ☆21Aug 26, 2020Updated 5 years ago
• gmh5225 / warbird-example

  View on GitHub
  ☆24Jul 15, 2023Updated 2 years ago
• archercreat / srvhide

  View on GitHub
  Simple tool to dump/hide services in services.exe process.
  ☆14Apr 22, 2022Updated 3 years ago
• OSRDrivers / Inverted

  View on GitHub
  Example WDF/KMDF driver and test app demonstrating the "inverted call model"
  ☆37May 1, 2020Updated 5 years ago
• mandiant / rvmi-kvm

  View on GitHub
  Linux-KVM with rVMI extensions
  ☆22Aug 28, 2017Updated 8 years ago
• huoji120 / awesome_anti_virus_engine

  View on GitHub
  about how to make a anti-virus engine
  ☆106May 22, 2025Updated 8 months ago
• VergiliusProject / kernels-data

  View on GitHub
  Windows kernel PDB data parsed into YAML
  ☆42Nov 2, 2025Updated 3 months ago
• ZEROWyt / Patchguard-2023

  View on GitHub
  ☆23Jul 24, 2023Updated 2 years ago
• HackingLZ / ExtractedDefender

  View on GitHub
  ☆231Jun 23, 2022Updated 3 years ago
• ly4k / Impacket

  View on GitHub
  Modified version of Impacket to use dynamic NTLMv2 Challenge/Response
  ☆20Dec 26, 2022Updated 3 years ago
• xiaomagexiao / GameDll

  View on GitHub
  gamedll
  ☆10May 11, 2017Updated 8 years ago
• xuyun018 / myvtcp6.0

  View on GitHub
  Reliable UDP, Author Whg
  ☆15Oct 8, 2019Updated 6 years ago
• gmh5225 / recompiler-egalito

  View on GitHub
  Self-hosting binary instrumentation framework for security research
  ☆12Apr 10, 2023Updated 2 years ago
• OSRDrivers / deleteex

  View on GitHub
  Demonstrate the new FileDispositionInfoEx behavior
  ☆14Nov 6, 2017Updated 8 years ago
• efchatz / Covert-C2

  View on GitHub
  A PoC C2 implementation that uses Native Messaging API to execute direct commands in the OS
  ☆17Nov 5, 2025Updated 3 months ago
• Cracked5pider / Rhaast

  View on GitHub
  doesnt work and wont work on it anymore
  ☆10Jul 8, 2024Updated last year
• nefarius / WinDbgSymbolsCachingProxy

  View on GitHub
  WinDbg Symbols Caching Proxy.
  ☆17Feb 3, 2026Updated last week
• ThunderJie / Windows-Kernel-Exploit

  View on GitHub
  Exploit for HEVD
  ☆10Sep 11, 2019Updated 6 years ago
• chaeyk / eac-leak

  View on GitHub
  this application shows EAC sdk's memory leak.
  ☆10Nov 30, 2021Updated 4 years ago
• nbs32k / inline-syscall

  View on GitHub
  Inline syscalls made for MSVC supporting x64 and WOW64
  ☆193Jul 10, 2023Updated 2 years ago
• mandiant / rvmi-qemu

  View on GitHub
  QEMU with rVMI extensions
  ☆25Jul 25, 2017Updated 8 years ago
• pinwhell / MSPDBX

  View on GitHub
  Lightweight PDB symbol parser and resolver
  ☆27Oct 28, 2024Updated last year
• shun-yo / Spaniel

  View on GitHub
  Malware analysis tool based on taint analysis.
  ☆14Jan 29, 2022Updated 4 years ago
• gmh5225 / VMP-Vmp3_64bit_disasm-prerelease-

  View on GitHub
  ☆11Jul 12, 2022Updated 3 years ago
• ComodoSecurity / OpenEDRRules

  View on GitHub
  ☆13Sep 22, 2022Updated 3 years ago
• leabhart / Maldocs

  View on GitHub
  Scripting together some of my favorite Python tools for doing initial triage of a suspected malicious document (e.g. PDF, DOC, DOCX, XSLM…
  ☆17Mar 8, 2022Updated 3 years ago
• brock7 / WRK1.2

  View on GitHub
  ☆10Mar 5, 2016Updated 9 years ago
• gam4er / SneakyRun

  View on GitHub
  Some stuff for PHD2021
  ☆14May 21, 2025Updated 8 months ago
• mmcloughlin / cpudb

  View on GitHub
  CPUID database derived from InstLatx64
  ☆15Feb 1, 2020Updated 6 years ago
• hfiref0x / WDExtract

  View on GitHub
  Extract Windows Defender database from vdm files and unpack it
  ☆473Aug 8, 2025Updated 6 months ago
• qtc-de / rpv-web

  View on GitHub
  rpv-web is a browser based frontend for the rpv library
  ☆26Nov 21, 2025Updated 2 months ago
• baiyfcu / DriverNoImage

  View on GitHub
  以shellcode注入其它驱动执行，躲避驱动签名检测，曾pubg项目中使用，，，当然现在，，，
  ☆27Oct 19, 2022Updated 3 years ago