Alternatives and similar repositories for crowdstrike-cloudproto:

Users that are interested in crowdstrike-cloudproto are comparing it to the libraries listed below

• 0xMegaByte / COM-Explained
  ☆25Updated 2 years ago
• klezVirus / DCKFinder
  Dangling COM Keys Finder
  ☆15Updated 3 years ago
• connormcgarr / Presentations
  ☆26Updated 3 months ago
• rbmm / Noname
  really ?
  ☆12Updated 11 months ago
• 7eRoM / elam
  A Practical example of ELAM (Early Launch Anti-Malware)
  ☆33Updated 3 years ago
• yardenshafir / conference_talks
  Slides from various conference talks
  ☆36Updated last year
• DownWithUp / WarbirdExamples
  An example of how to use Microsoft Windows Warbird technology
  ☆27Updated last year
• waleedassar / SyscallNumberExtractor
  ☆24Updated 3 years ago
• Signal-Labs / Hotpatching_PoC
  ☆19Updated last year
• airbus-cert / ttd2mdmp
  Extract data of TTD trace file to a minidump
  ☆28Updated last year
• namazso / PEDiffGen
  Subtract one PE file from another!
  ☆20Updated 3 years ago
• rbmm / PPL
  run process as PPL Antimalware
  ☆11Updated last year
• zodiacon / AccessMask
  ☆18Updated 5 years ago
• williamknows / CodeCoverageModuleStomping
  ☆10Updated 5 years ago
• alfarom256 / PebLdr
  ☆15Updated 4 years ago
• jsecurity101 / MSFT_DriverBlockList
  Repository of Microsoft Driver Block Lists based off of OS-builds
  ☆39Updated 9 months ago
• NUL0x4C / T.D.P.
  Using Thread Description To Hide Shellcodes
  ☆14Updated 2 years ago
• s4dbrd / ETWReader
  Read ETW Provider events. Inspired by ETWExplorer by Pavel Yosifovich
  ☆14Updated 7 months ago
• ch3rn0byl / Gremlins
  ☆14Updated last year
• jsacco / PPL_Bypass
  ☆12Updated 2 years ago
• rbmm / partial
  d
  ☆13Updated last year
• yo-yo-yo-jbo / anti_debugging_intro
  ☆22Updated last year
• rbmm / DirectSysCall
  ☆12Updated last year
• PwCUK-CTO / BinaryNinja_shellcodehashes
  Port of Mandiant ShellcodeHashes plugin from IDA to BinaryNinja
  ☆11Updated 6 months ago
• gabriellandau / CISpotter
  Code Integrity Violation Spotter
  ☆17Updated 7 months ago
• bananabr / Givemeahand
  A PoC tool for exploiting leaked process and thread handles
  ☆30Updated 11 months ago
• rbmm / LIB
  ☆8Updated this week
• tyranid / setsidmapping
  Simple tool to use LsaManageSidNameMapping get LSA to add or remove SID to name mappings.
  ☆23Updated 4 years ago
• securesean / Shim-Process-Scanner
  Windows x64 Process Scanner to detect application compatability shims
  ☆36Updated 6 years ago
• passthehashbrowns / hook-integrity-checks
  ☆20Updated 3 years ago