Alternatives and similar repositories for Windows-Symbol-Tables

Users that are interested in Windows-Symbol-Tables are comparing it to the libraries listed below

• Abyss-W4tcher / volatility2-profiles
  Collection of Volatility2 profiles, generated against Linux kernels.
  ☆43Updated 3 weeks ago
• keydet89 / RegRipper4.0
  RegRipper4.0
  ☆50Updated last month
• elastic / labs-releases
  Elastic Security Labs releases
  ☆66Updated 2 weeks ago
• volatilityfoundation / community3
  Volatility3 plugins developed and maintained by the community
  ☆57Updated 2 years ago
• harelsegev / prefetch-hash-cracker
  A small util to brute-force prefetch hashes
  ☆77Updated 2 years ago
• kevthehermit / volatility_symbols
  Volatility Symbol Generator for Linux Kernels
  ☆35Updated last year
• strozfriedberg / cobaltstrike-config-extractor
  Cobalt Strike Beacon configuration extractor and parser.
  ☆153Updated 3 years ago
• 0x534a / dynmx
  Signature-based detection of malware features based on Windows API call sequences. It's like YARA for sandbox API traces!
  ☆83Updated last year
• sk4la / volatility3-docker
  Volatility, on Docker 🐳
  ☆34Updated last month
• airbus-cert / yara-ttd
  Use YARA rules on Time Travel Debugging traces
  ☆90Updated last year
• LETHAL-FORENSICS / Collect-MemoryDump
  Collect-MemoryDump - Automated Creation of Windows Memory Snapshots for DFIR
  ☆240Updated 2 months ago
• Neo23x0 / yaraQA
  YARA rule analyzer to improve rule quality and performance
  ☆101Updated last month
• g-les / 100DaysofYARA
  100 Days of YARA to be updated with rules & ideas as the year progresses
  ☆60Updated 2 years ago
• memoryforensics1 / VolExp
  volatility explorer
  ☆90Updated 4 years ago
• Neo23x0 / YARA-Performance-Guidelines
  A guide on how to write fast and memory friendly YARA rules
  ☆144Updated 3 months ago
• Abyss-W4tcher / volatility3-symbols
  Collection of Linux and macOS Volatility3 Intermediate Symbol Files (ISF), suitable for memory analysis 🔍
  ☆141Updated 3 weeks ago
• Immersive-Labs-Sec / SliverC2-Forensics
  A collection of tools and detections for the Sliver C2 Frameworj
  ☆126Updated 2 years ago
• breppo / Volatility-BitLocker
  Volatility plugin to retrieve the Full Volume Encryption Key in memory. The FVEK can then be used with the help of Dislocker to mount the…
  ☆50Updated 5 years ago
• forensicxlab / VISION-ProcMon
  A ProcessMonitor visualization application written in rust.
  ☆180Updated last year
• vobst / btf2json
  Generate Volatility3 profiles from BTF.
  ☆23Updated 5 months ago
• mthcht / ThreatHunting-Keywords-yara-rules
  yara detection rules for hunting with the threathunting-keywords project
  ☆121Updated 3 weeks ago
• JPCERTCC / jpcert-yara
  JPCERT/CC public YARA rules repository
  ☆106Updated 5 months ago
• whikernel / evtx2splunk
  Evtx to Splunk ingestor
  ☆15Updated 3 years ago
• knez / defender-dump
  Dump quarantined files from Windows Defender
  ☆63Updated 3 years ago
• EricZimmerman / AmcacheParser
  Parses amcache.hve files, but with a twist!
  ☆136Updated 4 months ago
• MagnetForensics / dumpit-linux
  Memory acquisition for Linux that makes sense.
  ☆196Updated last year
• yarox24 / EvtxHussar
  Initial triage of Windows Event logs
  ☆99Updated 11 months ago
• NextronSystems / evtx-baseline
  A repository hosting example goodware evtx logs containing sample software installation and basic user interaction
  ☆78Updated 3 weeks ago
• NorthwaveSecurity / lilo-pulse-secure-decrypt
  LILO based Pulse Secure appliance disk image decryptor
  ☆13Updated last year
• Velocidex / Linpmem
  Linpmem is a linux memory acquisition tool
  ☆84Updated last year