Alternatives and similar repositories for dumpit-linux

Users that are interested in dumpit-linux are comparing it to the libraries listed below

• LETHAL-FORENSICS / MemProcFS-Analyzer
  MemProcFS-Analyzer - Automated Forensic Analysis of Windows Memory Dumps for DFIR
  ☆688Updated last month
• keydet89 / RegRipper4.0
  RegRipper4.0
  ☆74Updated 2 weeks ago
• LDO-CERT / orochi
  The Volatility Collaborative GUI
  ☆263Updated this week
• YARAHQ / yara-forge
  Automated YARA Rule Standardization and Quality Assurance Tool
  ☆261Updated this week
• Psmths / windows-forensic-artifacts
  Handbook of windows forensic artifacts across multiple Windows version with interpretation tips and some examples. Work in progress!
  ☆413Updated last year
• forensicswiki / wiki
  Forensics Wiki, a wiki devoted to information about digital forensics (also known as computer forensics)
  ☆303Updated 2 months ago
• forensicxlab / VISION-ProcMon
  A ProcessMonitor visualization application written in rust.
  ☆184Updated 2 years ago
• mandiant / VM-Packages
  Chocolatey packages supporting the analysis environment projects FLARE-VM & Commando VM.
  ☆206Updated last week
• digitalsleuth / WIN-FOR
  Windows Forensics Environment Builder
  ☆167Updated this week
• Lazza / Fuji
  MacOS forensic acquisition made simple
  ☆201Updated 4 months ago
• Digital-Forensics-Discord-Server / ArtifactParsers
  A repo that aims to centralize a current, running list of relevant parsers/tools for known DFIR artifacts
  ☆74Updated last month
• mnrkbys / fjta
  FJTA (Forensic Journal Timeline Analyzer) is a tool that analyzes Linux filesystem (ext4, XFS) journals (not systemd-journald logs), gene…
  ☆96Updated last week
• Abyss-W4tcher / volatility3-symbols
  Collection of Linux and macOS Volatility3 Intermediate Symbol Files (ISF), suitable for memory analysis 🔍
  ☆240Updated last week
• netskopeoss / NetskopeThreatLabsIOCs
  ☆149Updated last month
• k1nd0ne / VolWeb
  A centralized and enhanced memory analysis platform
  ☆510Updated 4 months ago
• RussianPanda95 / Yara-Rules
  Repository of Yara Rules
  ☆131Updated this week
• Squiblydoo / debloat
  A GUI and CLI tool for removing bloat from executables
  ☆433Updated 5 months ago
• leludo84 / vol3-linux-profiles
  Volatility3 Linux profiles
  ☆68Updated last month
• Malandrone / PowerDecode
  PowerDecode is a PowerShell-based tool that allows to deobfuscate PowerShell scripts obfuscated across multiple layers. The tool performs…
  ☆226Updated last year
• Ahmed-AL-Maghraby / Windows-Registry-Analysis-Cheat-Sheet
  ☆167Updated 2 years ago
• EricZimmerman / MFTECmd
  Parses $MFT from NTFS file systems
  ☆281Updated 7 months ago
• LETHAL-FORENSICS / Collect-MemoryDump
  Collect-MemoryDump - Automated Creation of Windows Memory Snapshots for DFIR
  ☆251Updated last month
• dfir-dd / dfir-toolkit
  CLI tools for forensic investigation of Windows artifacts
  ☆347Updated 4 months ago
• Abyss-W4tcher / volatility2-profiles
  Collection of Volatility2 profiles, generated against Linux kernels.
  ☆53Updated last month
• mf1d3l / Splunk4DFIR
  Harness the power of Splunk for your investigations
  ☆143Updated 2 months ago
• Neo23x0 / YARA-Style-Guide
  A specification and style guide for YARA rules
  ☆62Updated last year
• dwmetz / CyberPipe
  An easy to use PowerShell script to collect memory and disk forensics for DFIR investigations.
  ☆339Updated last week
• JPCERTCC / Windows-Symbol-Tables
  Windows symbol tables for Volatility 3
  ☆91Updated last year
• M00NLIG7 / ChopChopGo
  Rapidly Search and Hunt through Linux Forensics Artifacts
  ☆200Updated last year
• elastic / labs-releases
  Elastic Security Labs releases
  ☆81Updated 2 weeks ago