Alternatives and similar repositories for volatility-scripts

Users that are interested in volatility-scripts are comparing it to the libraries listed below

• anyrun / blog-scripts
  ☆33Updated 10 months ago
• 0xHasanM / Autopsy-Registry-Explorer
  Autopsy Module to analyze Registry Hives
  ☆15Updated 3 years ago
• DissectMalware / yaradbg-frontend
  ☆39Updated last year
• leandrofroes / malware-research
  General malware analysis stuff
  ☆37Updated last year
• tccontre / KnowledgeBase
  Collection of tips, tools, arsenal and techniques I've learned during RE and other CyberSecStuff
  ☆57Updated 3 weeks ago
• fox-it / dissect.esedb
  A Dissect module implementing a parser for Microsofts Extensible Storage Engine Database (ESEDB), used for example in Active Directory, E…
  ☆21Updated last week
• strozfriedberg / QELP
  Quick ESXi Log Parser
  ☆26Updated last month
• ArsenalRecon / SdbaParser
  Parser for Sdba memory pool tags
  ☆20Updated 4 years ago
• kacos2000 / Prefetch-Browser
  Browse Windows Prefetch versions: 17,23,26,30v1/2,31 & some of SuperFetch .7db/.db's
  ☆62Updated 9 months ago
• volatilityfoundation / community3
  Volatility3 plugins developed and maintained by the community
  ☆59Updated 2 years ago
• lxndrblz / forensicsim
  A forensic open-source parser module for Autopsy that allows extracting the messages, comments, posts, contacts, calendar entries and rea…
  ☆103Updated this week
• herosi / triage-collector
  ☆23Updated last year
• jstrosch / subparse
  Modular malware analysis artifact collection and correlation framework
  ☆53Updated last year
• tstromberg / sunlight
  Linux #rootkit and #malware revealer
  ☆27Updated last year
• JPCERTCC / etw-scan
  ETW forensic tool for Volatility3 plugin
  ☆16Updated 10 months ago
• harelsegev / prefetch-hash-cracker
  A small util to brute-force prefetch hashes
  ☆78Updated 3 years ago
• fr0gger / MalwareMuncher
  Malware Muncher is a proof-of-concept Python script that utilizes the Frida framework for binary instrumentation and API hooking, enablin…
  ☆45Updated 2 years ago
• ufrisk / MemProcFS-plugins
  ☆58Updated 11 months ago
• 0xThiebaut / PCAPeek
  A proof-of-concept re-assembler for reverse VNC traffic.
  ☆25Updated 2 years ago
• ThisIsLibra / MalPull
  A multi-threaded malware sample downloader based upon given MD-5/SHA-1/SHA-256 hashes, using multiple malware databases.
  ☆30Updated 2 years ago
• jstrosch / subcrawl
  SubCrawl is a modular framework for discovering open directories, identifying unique content through signatures and organizing the data w…
  ☆54Updated 10 months ago
• stairwell-inc / threat-research
  Repository of tools, YARA rules, and code-snippets from Stairwell's research team.
  ☆23Updated last year
• kacos2000 / Evtx_Log_Browser
  Evtx Log (xml) Browser
  ☆55Updated 2 years ago
• ANSSI-FR / orc2timeline
  orc2timeline extracts and analyzes artifacts contained in archives generated with DFIR-ORC.exe to create a timeline from them
  ☆34Updated 3 months ago
• lasq88 / MalwareAnalysis
  Malware Analysis tools
  ☆26Updated last year
• cmdshiftd / elrond
  Accelerating the collection, processing, analysis and outputting of digital forensic artefacts.
  ☆31Updated 8 months ago
• cod3nym / detection-rules
  Collection of my own detection rules
  ☆20Updated 3 months ago
• AbdulRhmanAlfaifi / lnk_parser
  lnk_parser is a full rust implementation to parse windows LNK files
  ☆20Updated 3 months ago
• malpedia / malpedia-flossed
  FLARE floss applied to all unpacked+dumped samples in Malpedia, pre-processed for further use.
  ☆59Updated 4 months ago
• 0xThiebaut / Signatures
  🚧 Currently transfering TLP:CLEAR rules from TLP:AMBER repository...
  ☆21Updated last year