Alternatives and similar repositories for tlsh

Users that are interested in tlsh are comparing it to the libraries listed below

• ssdeep-project / ssdeep
  Fuzzy hashing API and fuzzy hashing tool
  ☆739Updated 4 years ago
• sdhash / sdhash
  similarity digest hashing tool
  ☆172Updated 4 years ago
• VirusTotal / yara-python
  The Python interface for YARA
  ☆705Updated 3 months ago
• tklengyel / drakvuf
  DRAKVUF Black-box Binary Analysis
  ☆1,151Updated 2 weeks ago
• guelfoweb / peframe
  PEframe is a open source tool to perform static analysis on Portable Executable malware and malicious MS Office documents.
  ☆614Updated 3 years ago
• malicialab / avclass
  AVClass malware labeling tool
  ☆476Updated 10 months ago
• BayshoreNetworks / yextend
  Yara integrated software to handle archive file data.
  ☆316Updated 3 years ago
• JusticeRage / Manalyze
  A static analyzer for PE executables.
  ☆1,082Updated last year
• vivisect / vivisect
  ☆970Updated last month
• google / rekall
  Rekall Memory Forensic Framework
  ☆1,971Updated 4 years ago
• viper-framework / viper
  Binary analysis and management framework
  ☆1,552Updated 2 years ago
• libyal / libyal
  Yet another library library (and tools)
  ☆213Updated 8 months ago
• panda-re / panda
  Platform for Architecture-Neutral Dynamic Analysis
  ☆2,648Updated 2 weeks ago
• googleprojectzero / functionsimsearch
  Some C++ example code to demonstrate how to perform code similarity searches using SimHashing.
  ☆563Updated 5 years ago
• buffer / thug
  Python low-interaction honeyclient
  ☆1,020Updated last week
• mandiant / capa-rules
  Standard collection of rules for capa: the tool for enumerating the capabilities of programs
  ☆628Updated last week
• carbonblack / binee
  Binee: binary emulation environment
  ☆527Updated 2 years ago
• hatching / vmcloak
  Automated Virtual Machine Generation and Cloaking for Cuckoo Sandbox.
  ☆505Updated last year
• microsoft / avml
  AVML - Acquire Volatile Memory for Linux
  ☆982Updated this week
• erocarrera / pefile
  pefile is a Python module to read and work with PE (Portable Executable) files
  ☆1,966Updated last year
• baderj / domain_generation_algorithms
  Some results of my DGA reversing efforts
  ☆678Updated 5 months ago
• log2timeline / plaso
  Super timeline all the things
  ☆1,914Updated last month
• libyal / libewf
  Libewf is a library to access the Expert Witness Compression Format (EWF)
  ☆280Updated last year
• trailofbits / polyfile
  A pure Python cleanroom implementation of libmagic, with instrumented parsing from Kaitai struct and an interactive hex viewer
  ☆366Updated 3 weeks ago
• HynekPetrak / malware-jail
  Sandbox for semi-automatic Javascript malware analysis, deobfuscation and payload extraction. Written for Node.js
  ☆473Updated 2 years ago
• ctxis / CAPE
  Malware Configuration And Payload Extraction
  ☆761Updated 9 months ago
• joxeankoret / pyew
  Official repository for Pyew.
  ☆390Updated 5 years ago
• rieck / malheur
  A Tool for Automatic Analysis of Malware Behavior
  ☆373Updated 6 years ago
• 504ensicsLabs / LiME
  LiME (formerly DMD) is a Loadable Kernel Module (LKM), which allows the acquisition of volatile memory from Linux and Linux-based devices…
  ☆1,854Updated 2 weeks ago
• CERT-Polska / drakvuf-sandbox
  DRAKVUF Sandbox - automated hypervisor-level malware analysis system
  ☆1,191Updated last week