Alternatives and similar repositories for loffice:

Users that are interested in loffice are comparing it to the libraries listed below

• mandiant / Volatility-Plugins
  ☆82Updated 8 years ago
• PoorBillionaire / Windows-Prefetch-Parser
  Parse Windows Prefetch files: Supports XP - Windows 10 Prefetch files
  ☆115Updated 9 months ago
• Neo23x0 / ImpHash-Generator
  PE Import Hash Generator
  ☆75Updated 7 years ago
• DissectMalware / MalwareCMDMonitor
  Shows command lines used by latest instances analyzed on Hybrid-Analysis
  ☆43Updated 6 years ago
• williballenthin / process-forest
  Reconstruct process trees from event logs
  ☆147Updated 4 years ago
• darkquasar / WMI_Persistence
  A repo to hold some scripts pertaining WMI (Windows implementation of WBEM) forensics
  ☆85Updated 7 years ago
• matonis / page_brute
  Page File analysis tools.
  ☆126Updated 9 years ago
• d00rt / emotet_research
  ☆134Updated 6 years ago
• Neo23x0 / DLLRunner
  Smart DLL execution for malware analysis in sandbox systems
  ☆143Updated 10 years ago
• MAECProject / malware-behaviors
  A taxonomy and dictionary of malware behaviors.
  ☆42Updated 5 years ago
• williballenthin / python-sdb
  Pure Python parser for Application Compatibility Shim Databases (.sdb files)
  ☆108Updated 4 years ago
• threatminer / APTnotes
  Various public documents, whitepapers and articles about APT campaigns
  ☆54Updated 8 years ago
• giMini / NOAH
  PowerShell No Agent Hunting
  ☆109Updated 6 years ago
• AlienVault-OTX / yabin
  A Yara rule generator for finding related samples and hunting
  ☆158Updated 2 years ago
• MinervaLabsResearch / Mystique
  Mystique may be used to discover infection markers that can be used to vaccinate endpoints against malware. It receives as input a malici…
  ☆82Updated 7 years ago
• kevthehermit / YaraPcap
  Process HTTP Pcaps With YARA
  ☆101Updated 11 years ago
• d00rt / emotet_network_protocol
  ☆82Updated 5 years ago
• Silv3rHorn / ArtifactExtractor
  Extract common Windows artifacts from source images and VSCs
  ☆65Updated 3 years ago
• Neo23x0 / exotron
  Sandbox feature upgrade with the help of wrapped samples
  ☆76Updated 6 years ago
• jipegit / IRNotes
  Some IR notes
  ☆73Updated 8 years ago
• monnappa22 / HollowFind
  Hollowfind is a Volatility plugin to detect different types of process hollowing techniques used in the wild to bypass, confuse, deflect …
  ☆132Updated 2 years ago
• JohnLaTwC / PyPowerShellXray
  Python script to decode common encoded PowerShell scripts
  ☆216Updated 6 years ago
• Big5-sec / SourceFu
  hopefully a source-to-source deobfuscator, aiming at deobfuscating common scripts languages such as Powershell, VBA and Javascript. Curre…
  ☆40Updated 5 years ago
• veramine / Detections
  ☆108Updated 7 years ago
• YahooArchive / PyIOCe
  Python IOC Editor
  ☆62Updated 10 years ago
• karttoon / binsequencer
  BinSequencer is a script designed to find a common pattern of bytes within a set of samples and generate a YARA rule from the identified…
  ☆76Updated 3 years ago
• swackhamer / vt_notification_puller
  VirusTotal Intelligence Notification Puller
  ☆28Updated 8 years ago
• csababarta / volatility_plugins
  Volatility plugins created by the author
  ☆44Updated 9 years ago
• mattifestation / BHUSA2018_Sysmon
  All materials from our Black Hat 2018 "Subverting Sysmon" talk
  ☆136Updated 6 years ago
• dnlongen / RegLister
  Recurse through a registry, identifying values with large data -- a registry malware hunter
  ☆44Updated 8 years ago