zodiacon / syllabiLinks
☆63Updated last year
Alternatives and similar repositories for syllabi
Users that are interested in syllabi are comparing it to the libraries listed below
Sorting:
- Windows kernel PDB data parsed into YAML☆41Updated last month
- API Set Viewer☆90Updated 10 months ago
- MalUnpack companion driver☆99Updated last year
- Recon 2023 slides and code☆80Updated 2 years ago
- The Console Monitor Driver is a KMDF kernel-mode filter driver that captures certain Fast I/O operations (input and output) that is sent …☆41Updated 3 years ago
- A collection of tools, source code, and papers researching Windows' implementation of CET.☆86Updated 5 years ago
- GarbageMan is a set of tools for analyzing .NET binaries through heap analysis.☆118Updated 2 years ago
- Small visualizator for PE files☆70Updated 2 years ago
- ☆72Updated 2 years ago
- A tool that automates regex generation for the x86 and x86-64 instruction sets☆71Updated last year
- Winbindex bot to pull in binaries for specific releases☆48Updated 2 years ago
- Run Processes as PPL with ELAM☆173Updated 3 years ago
- A WinDbg extension to trace COM interactions☆122Updated 4 months ago
- An experimental dynamic malware unpacker based on Intel Pin and PE-sieve☆63Updated last year
- This tool is the result of a reverse engineering process of the Windows service called SysMain. Time to interact with the prefetch files …☆32Updated 5 years ago
- Leverage AMSI (Antimalware Scan Interface) technology to aid your analysis. This tool saves all buffers (scripts, .NET assemblies, etc) …☆112Updated 4 years ago
- a PE Loader and Windows API tracer. Useful in malware analysis.☆143Updated 3 years ago
- ☆26Updated 2 years ago
- CallMon is an experimental system call monitoring tool that works on Windows 10 versions 2004+ using PsAltSystemCallHandlers☆144Updated 5 years ago
- Local OXID Resolver (LCLOR) : Research and Tooling☆37Updated 4 years ago
- A novel technique to communicate between threads using the standard ETHREAD structure☆114Updated 4 years ago
- ☆26Updated 3 years ago
- A Practical example of ELAM (Early Launch Anti-Malware)☆35Updated 4 years ago
- Simple windows API logger☆109Updated 6 years ago
- API Logger for Windows Executables☆80Updated 5 years ago
- Windows Drivers☆100Updated 6 years ago
- An x64dbg plugin which marks XFG call signatures as data☆78Updated 2 years ago
- A Python script to download PDB files associated with a Portable Executable (PE)☆124Updated 10 months ago
- Invoke-DetectItEasy is a wrapper for excelent tool called Detect-It-Easy. This PS module is very useful for Threat Hunting and Forensics.☆29Updated 3 years ago
- Sysmon shenanigans☆66Updated 5 years ago