SysmonForLinux
theZoo
| SysmonForLinux | theZoo | |
|---|---|---|
| 11 | 64 | |
| 1,620 | 10,749 | |
| 2.0% | - | |
| 6.6 | 2.8 | |
| 4 days ago | about 1 month ago | |
| C | Python | |
| MIT License | GNU General Public License v3.0 or later |
Stars - the number of stars that a project has on GitHub. Growth - month over month growth in stars.
Activity is a relative number indicating how actively a project is being developed. Recent commits have higher weight than older ones.
For example, an activity of 9.0 indicates that a project is amongst the top 10% of the most actively developed projects that we are tracking.
SysmonForLinux
- Sysmon for Linux
- Any useful cybersecurity software under $5k?
-
Security Cadence: Sysmon (Logging Part 2 out of ?????)
Did you know that Sysmon is so fantastic that Microsoft ported it to Linux? They sure did and it is awesome. It can be found here: https://github.com/Sysinternals/SysmonForLinux
-
Install Sysmon for Linux on RHEL 8?
I followed the install instructions for RHEL 8 found here: https://github.com/Sysinternals/SysmonForLinux/blob/main/INSTALL.md and that seemed to work correctly.
- The GoDaddy hack is wider than initially thought. Started on the 6th of September!
- Microsoft releases Linux version of the Windows Sysmon tool
- Sysmon for Linux 1.0.0 Released
- Microsoft releases Symon for Linux
- Sysinternals/SysmonForLinux
- Sysmon For Linux builds
theZoo
- TheZoo a.k.a. Malware DB
-
Tools to demonstrate malware or ransomware infected PC
Any.run as others have suggested or you could spin up a sandbox. As far as demonstrating, you can’t do better than the live malware https://github.com/ytisf/theZoo.
-
Worms for practice
Dunno about safe, but you could have a look at The Zoo.
- Repo Collection for Malware analysis enthusiasts
- Diablo I/II/III/IV/Immortal Class Randomizer
- GitHub - INeddHelp/Destroyer: It destroys your pc
- Gshade updates discontinued ;-;
-
How to write malware
vx-underground The Zoo
- Malware source code to investigate
-
Dummy email data for demonstration purposes?
Not sure if any examples of mail in TheZoo as well. https://github.com/ytisf/theZoo
What are some alternatives?
sysmon-modular - A repository of sysmon configuration modules
DDOS-RootSec - DDOS Archive by RootSec (Scanners, BotNets (Mirai and QBot Premium & Normal and more), Exploits, Methods, Sniffers)
sysmon-config - Sysmon configuration file template with default high-quality event tracing
Malware-Sample-Sources - Malware Sample Sources
SysmonTools - Utilities for Sysmon
NoRussian - Volunteer DoS tool via HTML + JS
Aurora-Incident-Response - Incident Response Documentation made easy. Developed by Incident Responders for Incident Responders
malware-samples - A collection of malware samples caught by several honeypots i manage
VanillaWindowsReference - A repo that contains recursive directory listings (using PowerShell) of a vanilla (clean) install of every Windows OS version to compare and see what's been added with each update. Use these CSVs to create your own known good hash sets!
drakvuf-sandbox - DRAKVUF Sandbox - automated hypervisor-level malware analysis system
awesome-pcaptools - A collection of tools developed by other researchers in the Computer Science area to process network traces. All the right reserved for the original authors.
MalwareSourceCode - Collection of malware source code for a variety of platforms in an array of different programming languages.