Main Sigma Rule Repository

Open EDR public repository

A Pin Tool for tracing API calls etc

Malware dynamic instrumentation tool based on frida framework

edb is a cross-platform AArch32/x86/x86-64 debugger.

Sandboxie Plus & Classic

Binee: binary emulation environment

Windows System Call Tables (NT/2000/XP/2003/Vista/7/8/10/11)

Scans all running processes. Recognizes and dumps a variety of potentially malicious implants (replaced/implanted PEs, shellcodes, hooks, in-memory patches).

Detours is a software package for monitoring and instrumenting API calls on Windows. It is distributed in source code form.

Fast and lightweight x86/x86-64 disassembler and code generation library

A free Windows-compatible Operating System

An open-source user mode debugger for Windows. Optimized for reverse engineering and malware analysis.

Cmulator is ( x86 - x64 ) Scriptable Reverse Engineering Sandbox Emulator for shellcode and PE binaries . Based on Unicorn & Zydis Engine & javascript