Alternatives and similar repositories for dumpit-linux

Users that are interested in dumpit-linux are comparing it to the libraries listed below

• LETHAL-FORENSICS / MemProcFS-Analyzer
  MemProcFS-Analyzer - Automated Forensic Analysis of Windows Memory Dumps for DFIR
  ☆623Updated 2 months ago
• forensicxlab / VISION-ProcMon
  A ProcessMonitor visualization application written in rust.
  ☆178Updated last year
• JPCERTCC / Windows-Symbol-Tables
  Windows symbol tables for Volatility 3
  ☆85Updated 10 months ago
• Psmths / windows-forensic-artifacts
  Handbook of windows forensic artifacts across multiple Windows version with interpretation tips and some examples. Work in progress!
  ☆349Updated 9 months ago
• LDO-CERT / orochi
  The Volatility Collaborative GUI
  ☆242Updated this week
• YARAHQ / yara-forge
  Automated YARA Rule Standardization and Quality Assurance Tool
  ☆218Updated this week
• Digital-Forensics-Discord-Server / ArtifactParsers
  A repo that aims to centralize a current, running list of relevant parsers/tools for known DFIR artifacts
  ☆61Updated 6 months ago
• Abyss-W4tcher / volatility3-symbols
  Collection of Linux and macOS Volatility3 Intermediate Symbol Files (ISF), suitable for memory analysis 🔍
  ☆118Updated this week
• Beercow / OneDriveExplorer
  OneDriveExplorer is a command line and GUI based application for reconstructing the folder structure of OneDrive from the <UserCid>.dat a…
  ☆196Updated this week
• mandiant / VM-Packages
  Chocolatey packages supporting the analysis environment projects FLARE-VM & Commando VM.
  ☆177Updated this week
• netskopeoss / NetskopeThreatLabsIOCs
  ☆130Updated last week
• LETHAL-FORENSICS / Collect-MemoryDump
  Collect-MemoryDump - Automated Creation of Windows Memory Snapshots for DFIR
  ☆239Updated last month
• docker-forensics-toolkit / toolkit
  A toolkit for the post-mortem examination of Docker containers from forensic HDD copies
  ☆99Updated last year
• digitalsleuth / WIN-FOR
  Windows Forensics Environment Builder
  ☆135Updated 4 months ago
• Ahmed-AL-Maghraby / Windows-Registry-Analysis-Cheat-Sheet
  ☆159Updated last year
• k1nd0ne / VolWeb
  A centralized and enhanced memory analysis platform
  ☆459Updated 3 months ago
• Neo23x0 / Loki2
  LOKI2 - Simple IOC and YARA Scanner
  ☆93Updated 9 months ago
• RussianPanda95 / Yara-Rules
  Repository of Yara Rules
  ☆110Updated last month
• strozfriedberg / sidr
  Search Index Database Reporter
  ☆109Updated 6 months ago
• gtworek / VolatileDataCollector
  ☆201Updated 6 months ago
• EricZimmerman / MFTECmd
  Parses $MFT from NTFS file systems
  ☆238Updated last week
• CrowdStrike / SuperMem
  A python script developed to process Windows memory images based on triage type.
  ☆262Updated last year
• ExaTrack / Kdrill
  Python tool to check rootkits in Windows kernel
  ☆195Updated 2 months ago
• knez / defender-dump
  Dump quarantined files from Windows Defender
  ☆63Updated 3 years ago
• 100DaysofYARA / 2024
  Rules shared by the community from 100 Days of YARA 2024
  ☆85Updated 4 months ago
• mf1d3l / Splunk4DFIR
  Harness the power of Splunk for your investigations
  ☆105Updated this week
• reecdeep / segugio
  Segugio allows the execution and tracking of critical steps in the malware detonation process, from clicking on the first stage to extrac…
  ☆149Updated 7 months ago
• Velocidex / Linpmem
  Linpmem is a linux memory acquisition tool
  ☆83Updated last year
• bartblaze / Yara-rules
  Collection of private Yara rules.
  ☆354Updated 3 weeks ago
• dfir-dd / dfir-toolkit
  CLI tools for forensic investigation of Windows artifacts
  ☆327Updated 6 months ago