adamkramer

dll_hijack_detect. Detects DLL hijacking in running processes on Windows systems

jmp2it. Transfer EIP control to shellcode during malware analysis investigation

handle_monitor. Identifying and Disrupting Crypto-Ransomware (and Destructive Malware) using handle heurustics

rapid_env. Rapid deployment of Windows environment (files, registry keys, mutex etc) to facilitate malware analysis

reg_export. C++

shape_shift. Python

check_first. Just-in-time VirusTotal checker (proof of concept)

attack_surface_monitor. Python

handleinheritor. C++

film_reel. Python

create_mutex. This program will create one or more mutex as specified by the passed arguments and keep them active as long as the program keeps running.