Abyss-W4tcher / volatility3-symbolsLinks
Collection of Linux and macOS Volatility3 Intermediate Symbol Files (ISF), suitable for memory analysis π
β233Updated 3 weeks ago
Alternatives and similar repositories for volatility3-symbols
Users that are interested in volatility3-symbols are comparing it to the libraries listed below
Sorting:
- Volatility3 Linux profilesβ68Updated last week
- Collection of Volatility2 profiles, generated against Linux kernels.β53Updated 3 weeks ago
- A centralized and enhanced memory analysis platformβ508Updated 4 months ago
- Memory acquisition for Linux that makes sense.β214Updated 2 years ago
- MemProcFS-Analyzer - Automated Forensic Analysis of Windows Memory Dumps for DFIRβ688Updated last month
- PowerDecode is a PowerShell-based tool that allows to deobfuscate PowerShell scripts obfuscated across multiple layers. The tool performsβ¦β226Updated last year
- A curated list of ressources for Volatility 2 & 3β12Updated last year
- Windows symbol tables for Volatility 3β91Updated last year
- Handbook of windows forensic artifacts across multiple Windows version with interpretation tips and some examples. Work in progress!β405Updated last year
- RDP Bitmap Cache parserβ581Updated 10 months ago
- The Volatility Collaborative GUIβ260Updated last week
- DFIR LABS - A compilation of challenges that aims to provide practice in simple to advanced concepts in the following topics: Digital Forβ¦β381Updated 3 months ago
- CAPE core and community parsersβ17Updated last week
- RegRipper4.0β74Updated 3 months ago
- Automated YARA Rule Standardization and Quality Assurance Toolβ257Updated this week
- Parses $MFT from NTFS file systemsβ277Updated 6 months ago
- A GUI and CLI tool for removing bloat from executablesβ431Updated 4 months ago
- Rapidly Search and Hunt through Linux Forensics Artifactsβ200Updated last year
- The multi-platform memory acquisition tool.β880Updated last month
- Chocolatey packages supporting the analysis environment projects FLARE-VM & Commando VM.β206Updated last week
- Forensics Wiki, a wiki devoted to information about digital forensics (also known as computer forensics)β298Updated last month
- Volatility Symbol Generator for Linux Kernelsβ36Updated 2 years ago
- A ProcessMonitor visualization application written in rust.β184Updated 2 years ago
- Signatures and IoCs from public Volexity blog posts.β359Updated last month
- Incident Response collection and processing scripts with automated reporting scriptsβ314Updated last year
- MBC content in markdownβ492Updated 5 months ago
- Links to various memory samplesβ36Updated 3 months ago
- convert ELF/DWARF symbol and type information into vol3's intermediate JSONβ138Updated last year
- Volatility plugin to retrieve the Full Volume Encryption Key in memory. The FVEK can then be used with the help of Dislocker to mount theβ¦β52Updated 5 years ago
- The goal of this repo is to archive artifacts from all versions of various OS's and categorizing them by type. This will help with artifaβ¦β623Updated 2 weeks ago