Malware detection tool for Windows PE files based on DFIR ORC data
☆12Mar 7, 2026Updated 7 months ago
Alternatives and similar repositories for DECODE
Users that are interested in DECODE are comparing it to the libraries listed below. We may earn a commission when you buy through links labeled 'Ad' on this page.
Sorting:
- orc2timeline extracts and analyzes artifacts contained in archives generated with DFIR-ORC.exe to create a timeline from them☆34Jun 27, 2025Updated last year
- A machine learning program to detect malwares on windows platform using the static and dynamic analysis.☆11Aug 9, 2021Updated 5 years ago
- Outil de triage automatisé de différents types de collectes d'artefacts.☆18Dec 8, 2025Updated 10 months ago
- SCAbox's website☆12Oct 14, 2022Updated 4 years ago
- My Linux profiles built for Volatility 2/3☆11Oct 11, 2025Updated last year
- Managed hosting for WordPress and PHP on Cloudways • AdManaged hosting for WordPress, Magento, Laravel, or PHP apps, on multiple cloud providers. Deploy in minutes on Cloudways by DigitalOcean.
- DFIR Reference☆11Jul 30, 2026Updated 3 months ago
- LILO based Pulse Secure appliance disk image decryptor☆13Mar 20, 2024Updated 2 years ago
- MFT and USN parser that allows direct extraction in filesystem timeline format (mactime), dump all resident files in the MFT in their ori…☆13May 10, 2023Updated 3 years ago
- Visualize Leetcode Solutions☆14Jul 13, 2025Updated last year
- Malware detection demo using machine learning.☆25Feb 9, 2018Updated 8 years ago
- A harmless cryptocurrency miner simulator for detection testing. Generates realistic mining-like artifacts without consuming resources or…☆15Feb 3, 2026Updated 9 months ago
- VMDetect is a Python based Windows VM detection and environment forensics tool that reads ACPI/SMBIOS firmware tables and system artifact…☆15Jul 14, 2026Updated 3 months ago
- ☆14Aug 24, 2026Updated 2 months ago
- ARIN is Awesome ReFS Investigation tool☆11Aug 9, 2020Updated 6 years ago
- AI Agents on DigitalOcean Gradient AI Platform • AdBuild production-ready AI agents using customizable tools or access multiple LLMs through a single endpoint. Create custom knowledge bases or connect external data.
- Splunk Queries for SOC Analyst☆17Jan 25, 2024Updated 2 years ago
- Python tool to check rootkits in Windows kernel☆213Aug 20, 2025Updated last year
- Offensive Web is a documentation website about web security research, bypass and new exploitation techniques.☆33Feb 14, 2026Updated 8 months ago
- Rust Weaponization for Red Team Engagements.☆13Nov 14, 2022Updated 3 years ago
- Open-source Linux/libfprint driver for Goodix SPI fingerprint sensors, currently supporting GDIX51C0 with a reverse-engineered native Chi…☆15Oct 19, 2026Updated 2 weeks ago
- ☆14Jun 1, 2023Updated 3 years ago
- $I30 INDX Carver☆18Jun 23, 2025Updated last year
- Suzaku (朱雀) is a sigma-based threat hunting and fast forensics timeline generator for cloud logs.☆235Oct 27, 2026Updated last week
- iOS Forensics MCP Server for analyzing iPhone/iPad file systems☆20Apr 24, 2025Updated last year
- Deploy on Railway without the complexity - Free Credits Offer • AdConnect your repo and Railway handles the rest with instant previews. Quickly provision container image services, databases, and storage volumes.
- A portable interface for energy monitoring utilities☆40Nov 29, 2024Updated last year
- The ldapconsole script allows you to perform custom LDAP requests to a Windows domain.☆70Apr 18, 2026Updated 6 months ago
- Fast scandir implementation based on jwalk which is implemented in Rust.☆43Oct 26, 2026Updated last week
- Patch your macOS kernel to enable support for the high-resolution timers on M1☆52May 8, 2025Updated last year
- Apple artifacts database - Mirror of https://github.com/cocool97/appledb_rs☆29Oct 14, 2025Updated last year
- ☆21Jul 4, 2022Updated 4 years ago
- lnk_parser is a full rust implementation to parse windows LNK files☆25Feb 17, 2026Updated 8 months ago
- Détection d'anomalie à partir des journaux d'authentification Windows☆18Apr 16, 2021Updated 5 years ago
- An advanced, yet simple, tunneling/pivoting tool that uses a TUN interface. Implementation of ligolo-ng into sliver☆31Feb 27, 2025Updated last year
- Serverless GPU API endpoints on Runpod - Get Bonus Credits • AdSkip the infrastructure headaches. Auto-scaling, pay-as-you-go, no-ops approach lets you focus on innovating your application.
- Forensics artefact collection tool for systems running Microsoft Windows☆453Oct 8, 2026Updated 3 weeks ago
- A practical DFIR cheatsheet for identifying, collecting, triaging, and reviewing macOS persistence mechanisms, with acquisition-aware gui…☆26Apr 26, 2026Updated 6 months ago
- CLI generator for Velociraptor offline collector☆17Sep 15, 2026Updated last month
- Modbus library for PHP (Google code follower)☆70Nov 7, 2022Updated 3 years ago
- ☆15Jun 7, 2024Updated 2 years ago
- My personnal notes on the P4wnP1☆18Feb 18, 2024Updated 2 years ago
- Guide journalisation Microsoft☆68Jun 16, 2026Updated 4 months ago