☆64Oct 17, 2024Updated 2 years ago
Alternatives and similar repositories for defender-recon24
Users that are interested in defender-recon24 are comparing it to the libraries listed below. We may earn a commission when you buy through links labeled 'Ad' on this page.
Sorting:
- Convert Microsoft Defender Antivirus Signatures (VDM) into YARA rules☆225Updated this week
- A parser for Microsoft PDB (Program Database) debugging information☆25Nov 5, 2024Updated last year
- defender_database☆25Oct 31, 2023Updated 2 years ago
- 关闭恶意驱动的文件和注册表保护☆14Jun 28, 2022Updated 4 years ago
- Identifies metadata of .NET binary files.☆21Apr 3, 2024Updated 2 years ago
- End-to-end encrypted email - Proton Mail • AdSpecial offer: 40% Off Yearly / 80% Off First Month. All Proton services are open source and independently audited for security.
- Collection of extracted Microsoft Defender data for security research purposes☆240Jun 23, 2022Updated 4 years ago
- Drop any Windows DPAPI artifact and it identifies the format and the exact master key it needs, then decrypts once you supply the key. Of…☆30Sep 23, 2026Updated last month
- ☆26Jul 15, 2023Updated 3 years ago
- Lightweight PDB symbol parser and resolver☆30Oct 28, 2024Updated 2 years ago
- Exemplary LLVM function pass implementing Control Flow Flattening.☆17May 2, 2018Updated 8 years ago
- TypeLib persistence technique☆151Oct 22, 2024Updated 2 years ago
- ☆38Apr 15, 2025Updated last year
- Sliver agent rewritten in C++☆49Sep 4, 2024Updated 2 years ago
- Control Flow Linearization☆26May 4, 2025Updated last year
- Wordpress hosting with auto-scaling - Free Trial Offer • AdFully Managed hosting for WordPress and WooCommerce businesses that need reliable, auto-scalable performance. Cloudways SafeUpdates now available.
- Linux-KVM with rVMI extensions☆23Aug 28, 2017Updated 9 years ago
- Leverage AMSI (Antimalware Scan Interface) technology to aid your analysis. This tool saves all buffers (scripts, .NET assemblies, etc) …☆112Apr 20, 2021Updated 5 years ago
- ☆24Jul 24, 2023Updated 3 years ago
- Easily search LLVM headers for all major versions!☆19Sep 14, 2025Updated last year
- Extracted Yara rules from Windows Defender mpavbase and mpasbase☆540May 14, 2026Updated 5 months ago
- ☆20Feb 23, 2022Updated 4 years ago
- Example WDF/KMDF driver and test app demonstrating the "inverted call model"☆37May 1, 2020Updated 6 years ago
- PoC for detecting and evading ETW detection of .Net Assembly.Load☆22Aug 26, 2020Updated 6 years ago
- Shellcode Loader Utilizing ETW Events☆66Feb 26, 2025Updated last year
- End-to-end encrypted email - Proton Mail • AdSpecial offer: 40% Off Yearly / 80% Off First Month. All Proton services are open source and independently audited for security.
- gamedll☆10May 11, 2017Updated 9 years ago
- Modified version of Impacket to use dynamic NTLMv2 Challenge/Response☆20Dec 26, 2022Updated 3 years ago
- ☆19Oct 14, 2024Updated 2 years ago
- ☆21Oct 18, 2023Updated 3 years ago
- Docker container for running CobaltStrike 4.7 and above☆26Mar 20, 2025Updated last year
- ☆42Sep 16, 2022Updated 4 years ago
- SHAREM is a shellcode analysis framework, capable of emulating more than 45,000 WinAPIs and virutally all Windows syscalls. It also conta…☆492Mar 22, 2026Updated 7 months ago
- CPUID database derived from InstLatx64☆15Feb 1, 2020Updated 6 years ago
- ☆85Oct 18, 2022Updated 4 years ago
- GPUs on demand by Runpod - Special Offer Available • AdRun AI, ML, and HPC workloads on powerful cloud GPUs—without limits or wasted spend. Deploy GPUs in under a minute and pay by the second.
- scripting IDA like a Pro☆24Oct 27, 2020Updated 6 years ago
- PackGenome: Automatically Generating Robust YARA Rules for Accurate Malware Packer Detection☆30Dec 6, 2023Updated 2 years ago
- a tiny program to consume from ETW providers for research☆55Jan 4, 2025Updated last year
- ☆14Dec 27, 2019Updated 6 years ago
- PoC memory injection detection agent based on ETW, for offensive and defensive research purposes☆300Apr 10, 2021Updated 5 years ago
- Another version of .NET loader provides capabilities of bypassing ETW and AMSI, utilizing VEH for syscalls and loading .NET assemblies☆49Jul 6, 2025Updated last year
- Hide Port In Windows☆40Jul 14, 2026Updated 3 months ago