A script to deploy File Server Resource Manager and associated scripts to block infected users

ReversingLabs YARA Rules

CryptoLocker is open source files encrypt-er. Crypto is developed in Visual C++. It has features encrypt all file, lock down the system and send keys back to the server. Multi-threaded functionality helps to this tool make encryption faster.

DGA Domain Detection using Bigram Frequency Analysis

A Windows Logon / Startup / Scheduled Task Script for Ransomware Detection & Early-Warning

Collection of private Yara rules.

Technion CS Ransomware Project: Writing Windows Mini-Filter Driver to protect PC from Ransomware

🔄 Ransomware recovery app for Nextcloud

Ransomware detection application for Windows using Windows Minifilter driver

A Deep Learning ensemble that classifies Windows executable files as either benign, ransomware, or other malware.

A little windows ransomware simulator that will rename .TXT files to .LOCKY to simulate ransomware behavior for testing various monitoring tools

A suite of PowerShell and Python scripts to help you fight ransomware using both known filespecs and zero-day resistant honey traps.

Cuckoo Sandbox report parser into ransomware classifier

Honeyfile-based ransomware detection and thwarting mechanism for Linux platforms

This program detects all present and future ransomware in Windows file shares or local drives for Windows file servers. I created this windows service to aide system administrators not average users.

Educational ransomware for evaluating ransomware detection tools

Experimental program for detecting if any ransomware is attacking your files

Ransomware example on Python, created during containment for educational purposes

Ransomware Detection Project, Technion, Israel

Ransom-cover is an integrated solution designed for detecting ransom-ware, decrypting infected files and preventing future ransom-ware infections on your PC.

A suspicious activity detector for Synology NAS.

Prevention against Ransomware attack, an automated implementation which help to prevent ransomware attacks

Ransomware Simulator for testing Blue Team Detections

This repo is created to perform data mining techniques on malicious and benign I/O Request Packet (IRP) logs on Windows machine to extract useful pieces of information to build a ransomware detection scheme.

RansomTraps is a free anti-ransomware program that creates dummy files and periodically verify their hashes.

Ransomware Removal Kit - Modified

This repo is created to perform I/O Request Packet (IRP) driven ransomware analysis where the IRP logs were collected during ransomware execution.