Alternatives and similar repositories for DECODE

Users that are interested in DECODE are comparing it to the libraries listed below

• elastic / labs-releases
  Elastic Security Labs releases
  ☆67Updated 2 weeks ago
• mnrkbys / fjta
  FJTA (Forensic Journal Timeline Analyzer) is a tool that analyzes Linux filesystem (EXT4, XFS) journals (not systemd-journald), generates…
  ☆64Updated 2 months ago
• telekom-security / malware_analysis
  This repository contains analysis scripts, YARA rules, and additional IoCs related to our Telekom Security blog posts.
  ☆114Updated last year
• blueteam0ps / AllthingsTimesketch
  This repository contains helper scripts and custom configs to get the best out of Google's Timesketch project.
  ☆108Updated last year
• docker-forensics-toolkit / toolkit
  A toolkit for the post-mortem examination of Docker containers from forensic HDD copies
  ☆101Updated last year
• Neo23x0 / YARA-Performance-Guidelines
  A guide on how to write fast and memory friendly YARA rules
  ☆144Updated 3 months ago
• mf1d3l / Splunk4DFIR
  Harness the power of Splunk for your investigations
  ☆107Updated last week
• ForensicArtifacts / artifacts-kb
  Digital Forensics Artifacts Knowledge Base
  ☆81Updated last year
• netskopeoss / NetskopeThreatLabsIOCs
  ☆131Updated last week
• openrelik / openrelik-server
  The core backend server handling API requests and task management
  ☆39Updated last week
• Yamato-Security / takajo
  Takajō (鷹匠) is a Hayabusa results analyzer.
  ☆121Updated this week
• CyberCX-DFIR / usnjrnl_rewind
  USN Journal full path builder
  ☆60Updated 8 months ago
• 100DaysofYARA / 2023
  Rules Shared by the Community from 100 Days of YARA 2023
  ☆76Updated 2 years ago
• CybercentreCanada / CCCS-Yara
  YARA rule metadata specification and validation utility / Spécification et validation pour les règles YARA
  ☆104Updated 3 weeks ago
• csababarta / memory-baseliner
  Memory Baseliner is a script that can compare two windows memory images or perform frequency of occurrence / data stacking analysis on mu…
  ☆54Updated last year
• 100DaysofYARA / 2024
  Rules shared by the community from 100 Days of YARA 2024
  ☆85Updated 5 months ago
• malpedia / malpedia-flossed
  FLARE floss applied to all unpacked+dumped samples in Malpedia, pre-processed for further use.
  ☆55Updated last week
• malpedia / signator-rules
  Collection of rules created using YARA-Signator over Malpedia
  ☆129Updated 6 months ago
• Neo23x0 / yaraQA
  YARA rule analyzer to improve rule quality and performance
  ☆101Updated last month
• viper-framework / viper2
  File analysis and management framework.
  ☆83Updated last year
• JPCERTCC / jpcert-yara
  JPCERT/CC public YARA rules repository
  ☆108Updated 5 months ago
• fox-it / dissect.target
  The Dissect module tying all other Dissect modules together. It provides a programming API and command line tools which allow easy access…
  ☆62Updated this week
• harelsegev / INDXRipper
  Carve file metadata from NTFS index ($I30) attributes
  ☆66Updated last year
• Yamato-Security / hayabusa-rules
  Curated Windows event log Sigma rules used in Hayabusa and Velociraptor.
  ☆182Updated this week
• SigmaHQ / pySigma-backend-elasticsearch
  pySigma Elasticsearch backend
  ☆53Updated last week
• The-DFIR-Report / Yara-Rules
  ☆69Updated 3 months ago
• keydet89 / Events-Ripper
  Project based on RegRipper, to extract add'l value/pivot points from TLN events file
  ☆85Updated 3 months ago
• jonny-jhnson / TelemetrySource
  ☆247Updated last year
• blueteam0ps / memOptix
  A Jupyter notebook to assist with the analysis of the output generated from Volatility memory extraction framework.
  ☆95Updated 2 years ago
• blackberry / threat-research-and-intelligence
  BlackBerry Threat Research & Intelligence
  ☆98Updated last year