
systeminformer
Real-time Windows system monitor with advanced process, network, and disk analysis, stack trace debugging, malware detection, and service management.…

Real-time Windows system monitor with advanced process, network, and disk analysis, stack trace debugging, malware detection, and service management.…

Automated YARA rule generation from the Cert Central compromised certificate database.

Parse and analyze a Windows Amcache.hve registry hive, VirusTotal integration.

IPED Digital Forensic Tool. It is an open source software that can be used to process and analyze digital evidence, often seized at crime scenes by…


Portable Executable reversing tool with a friendly GUI

pefile is a Python module to read and work with PE (Portable Executable) files

Advanced framework for extracting digital artifacts from volatile memory (RAM) samples, enabling deep forensic analysis of system runtime state…


A collection of software installations scripts for Windows systems that allows you to easily setup and maintain a reverse engineering environment on…

A list of Capture The Flag (CTF) frameworks, libraries, resources and software for started/experienced CTF players 🚩

Volatility 3 ported to Rust. Same output, much faster.

Windows tool for dumping malware PE files from memory back to disk for analysis.

Security sensor for realtime threat detection and protection

A blazingly fast, multi-threaded TUI malware analysis tool built in Rust. Features deep PE parsing, YARA scanning, and heuristic risk scoring.

Awesome-Cellular-Hacking

Static-first research tool for unpacking Nuitka-compiled binaries: extracts constants, modules, recovers .pyc files, and generates analysis reports.

DriverSentinel is a security tool developed in Go that detects malicious and vulnerable drivers on Windows systems by comparing them against the…