Malware detection tool for Windows PE files based on DFIR ORC data
☆11Mar 7, 2026Updated 4 months ago
Alternatives and similar repositories for DECODE
Users that are interested in DECODE are comparing it to the libraries listed below. We may earn a commission when you buy through links labeled 'Ad' on this page.
Sorting:
- orc2timeline extracts and analyzes artifacts contained in archives generated with DFIR-ORC.exe to create a timeline from them☆34Jun 27, 2025Updated last year
- My Linux profiles built for Volatility 2/3☆11Oct 11, 2025Updated 9 months ago
- LILO based Pulse Secure appliance disk image decryptor☆13Mar 20, 2024Updated 2 years ago
- Malware detection demo using machine learning.☆25Feb 9, 2018Updated 8 years ago
- MFT and USN parser that allows direct extraction in filesystem timeline format (mactime), dump all resident files in the MFT in their ori…☆13May 10, 2023Updated 3 years ago
- Deploy to Railway using AI coding agents - Free Credits Offer • AdUse Claude Code, Codex, OpenCode, and more. Autonomous software development now has the infrastructure to match with Railway.
- Offensive Web is a documentation website about web security research, bypass and new exploitation techniques.☆34Feb 14, 2026Updated 5 months ago
- PyDFIRRam is a Python library leveraging Volatility 3 to simplify and enhance memory forensics. It streamlines the research, parsing, and…☆31May 3, 2026Updated 2 months ago
- Qovery Github action allowing to deploy application.☆12Aug 1, 2023Updated 2 years ago
- Splunk Queries for SOC Analyst☆16Jan 25, 2024Updated 2 years ago
- Guide journalisation Microsoft☆70Jun 16, 2026Updated last month
- $I30 INDX Carver☆18Jun 23, 2025Updated last year
- iOS Forensics MCP Server for analyzing iPhone/iPad file systems☆18Apr 24, 2025Updated last year
- Outil de triage automatisé de différents types de collectes d'artefacts.☆18Dec 8, 2025Updated 7 months ago
- lnk_parser is a full rust implementation to parse windows LNK files☆23Feb 17, 2026Updated 5 months ago
- Deploy to Railway using AI coding agents - Free Credits Offer • AdUse Claude Code, Codex, OpenCode, and more. Autonomous software development now has the infrastructure to match with Railway.
- ☆21Jul 4, 2022Updated 4 years ago
- Apple artifacts database - Mirror of https://github.com/cocool97/appledb_rs☆27Oct 14, 2025Updated 9 months ago
- The MAGIC tool is a wrapper around the Microsoft Graph Python SDK, designed to download incident response-relevant data from M365 environ…☆35Apr 13, 2026Updated 3 months ago
- Live forensic artifacts collector☆177Jul 5, 2024Updated 2 years ago
- A practical DFIR cheatsheet for identifying, collecting, triaging, and reviewing macOS persistence mechanisms, with acquisition-aware gui…☆23Apr 26, 2026Updated 2 months ago
- An advanced, yet simple, tunneling/pivoting tool that uses a TUN interface. Implementation of ligolo-ng into sliver☆31Feb 27, 2025Updated last year
- A terminal UI to monitor and query Elasticsearch.☆12May 10, 2024Updated 2 years ago
- Modbus library for PHP (Google code follower)☆70Nov 7, 2022Updated 3 years ago
- A curated resource list of adversarial attacks and defenses for Windows PE malware detection.☆76Sep 2, 2022Updated 3 years ago
- Simple, predictable pricing with DigitalOcean hosting • AdAlways know what you'll pay with monthly caps and flat pricing. Enterprise-grade infrastructure trusted by 600k+ customers.
- Proof-of-concept implementation for the paper "Osiris: Automated Discovery of Microarchitectural Side Channels" (USENIX Security'21)☆67Jun 4, 2025Updated last year
- Comprehensive Windows Syscall Extraction & Analysis Framework☆172Aug 30, 2025Updated 10 months ago
- Various PowerShells scripts I've made (or others have made) to automate some of the boring stuff in my everyday DFIR journey!☆53Jan 9, 2026Updated 6 months ago
- Black cat magic ฅ(＾・ω・＾ฅ ✿)☆55Sep 28, 2022Updated 3 years ago
- Basic SDK for Intezer Platform API 2.0☆33Jul 9, 2026Updated 2 weeks ago
- 🔍 Gitsint is a cutting-edge OSINT platform designed for security researchers, threat intelligence teams, and developers. Uncover hidden …☆34Jan 7, 2026Updated 6 months ago
- ☆12Apr 3, 2014Updated 12 years ago
- Outil de récupération automatique des données de l'Active Directory / Automated tool for dumping Active Directory data☆286Jul 15, 2026Updated last week
- Sudoless alternative to powermetrics for Apple Silicon; realtime CPU & GPU frequency, volts, usage, etc.☆93May 20, 2024Updated 2 years ago
- Deploy to Railway using AI coding agents - Free Credits Offer • AdUse Claude Code, Codex, OpenCode, and more. Autonomous software development now has the infrastructure to match with Railway.
- A CLI for controlling scanners on MacOS☆10Feb 4, 2026Updated 5 months ago
- grap: define and match graph patterns within binaries☆154May 5, 2022Updated 4 years ago
- Note-taking repository for AWS Certified Cloud Practitioner course (CLF-CO2)☆14Feb 2, 2024Updated 2 years ago
- Allows to send notes taken with a reMarkable2 tablet to a Notion database using a Gmail address.☆32Jan 20, 2023Updated 3 years ago
- Kernel source tree for Raspberry Pi Foundation-provided kernel builds. Issues unrelated to the linux kernel should be posted on the commu…☆11Jul 12, 2026Updated last week
- Open-source hospital crisis management platform — multi-site, multi-language☆31Jul 2, 2026Updated 3 weeks ago
- A package to create HTML MISP reports, including volume of trending events and attributes, evens received from key organisations and targ…☆12Aug 14, 2025Updated 11 months ago