Abyss-W4tcher / volatility3-symbolsLinks
Collection of Linux and macOS Volatility3 Intermediate Symbol Files (ISF), suitable for memory analysis 🔍
☆221Updated last week
Alternatives and similar repositories for volatility3-symbols
Users that are interested in volatility3-symbols are comparing it to the libraries listed below
Sorting:
- Volatility3 Linux profiles☆59Updated last month
- Collection of Volatility2 profiles, generated against Linux kernels.☆53Updated 2 months ago
- A centralized and enhanced memory analysis platform☆505Updated 3 months ago
- Memory acquisition for Linux that makes sense.☆211Updated last year
- PowerDecode is a PowerShell-based tool that allows to deobfuscate PowerShell scripts obfuscated across multiple layers. The tool performs…☆216Updated last year
- MemProcFS-Analyzer - Automated Forensic Analysis of Windows Memory Dumps for DFIR☆682Updated last week
- A curated list of ressources for Volatility 2 & 3☆12Updated last year
- Handbook of windows forensic artifacts across multiple Windows version with interpretation tips and some examples. Work in progress!☆393Updated last year
- Windows symbol tables for Volatility 3☆91Updated last year
- DFIR LABS - A compilation of challenges that aims to provide practice in simple to advanced concepts in the following topics: Digital For…☆371Updated 2 months ago
- RDP Bitmap Cache parser☆576Updated 9 months ago
- The Volatility Collaborative GUI☆254Updated this week
- CAPE core and community parsers☆15Updated 2 weeks ago
- Automated YARA Rule Standardization and Quality Assurance Tool☆249Updated this week
- RegRipper4.0☆72Updated 2 months ago
- Forensics Wiki, a wiki devoted to information about digital forensics (also known as computer forensics)☆293Updated 3 weeks ago
- Rapidly Search and Hunt through Linux Forensics Artifacts☆200Updated last year
- MBC content in markdown☆486Updated 4 months ago
- A GUI and CLI tool for removing bloat from executables☆428Updated 3 months ago
- A collection of files with indicators supporting social media posts from Palo Alto Network's Unit 42 team to disseminate timely threat in…☆384Updated this week
- Parses $MFT from NTFS file systems☆268Updated 5 months ago
- A ProcessMonitor visualization application written in rust.☆184Updated 2 years ago
- Incident Response collection and processing scripts with automated reporting scripts☆312Updated last year
- Links to various memory samples☆36Updated 3 months ago
- Extracted Yara rules from Windows Defender mpavbase and mpasbase☆466Updated 2 months ago
- RegRipper3.0☆652Updated 10 months ago
- Signatures and IoCs from public Volexity blog posts.☆359Updated 3 weeks ago
- Generate Volatility3 profiles from BTF.☆29Updated 10 months ago
- ☆376Updated this week
- This is a repository dedicated to the DFIR journey. Contains notes, reflections and links to tools.☆101Updated last week