Alternatives and similar repositories for WinPmem

Users that are interested in WinPmem are comparing it to the libraries listed below

• LETHAL-FORENSICS / MemProcFS-Analyzer
  MemProcFS-Analyzer - Automated Forensic Analysis of Windows Memory Dumps for DFIR
  ☆693Updated 3 months ago
• magicsword-io / LOLDrivers
  Living Off The Land Drivers
  ☆1,378Updated last week
• keydet89 / RegRipper3.0
  RegRipper3.0
  ☆681Updated last year
• CERT-Polska / drakvuf-sandbox
  DRAKVUF Sandbox - automated hypervisor-level malware analysis system
  ☆1,262Updated 3 weeks ago
• mandiant / capa-rules
  Standard collection of rules for capa: the tool for enumerating the capabilities of programs
  ☆683Updated last week
• wavestone-cdt / EDRSandblast
  ☆1,781Updated last year
• ANSSI-FR / bmc-tools
  RDP Bitmap Cache parser
  ☆630Updated last year
• thewhiteninja / ntfstool
  Forensics tool for NTFS (parser, mft, bitlocker, deleted files)
  ☆589Updated 2 years ago
• elastic / protections-artifacts
  Elastic Security detection content for Endpoint
  ☆1,368Updated last week
• DissectMalware / XLMMacroDeobfuscator
  Extract and Deobfuscate XLM macros (a.k.a Excel 4.0 Macros)
  ☆587Updated last year
• forrest-orr / moneta
  Moneta is a live usermode memory analysis tool for Windows with the capability to detect malware IOCs
  ☆801Updated last year
• nasbench / EVTX-ETW-Resources
  Event Tracing For Windows (ETW) Resources
  ☆415Updated 3 months ago
• 0xrawsec / whids
  Open Source EDR for Windows
  ☆1,291Updated 2 years ago
• Mr-Un1k0d3r / EDRs
  ☆2,170Updated 2 years ago
• hasherezade / hollows_hunter
  Scans all running processes. Recognizes and dumps a variety of potentially malicious implants (replaced/implanted PEs, shellcodes, hooks,…
  ☆2,307Updated 3 months ago
• hasherezade / mal_unpack
  Dynamic unpacker based on PE-sieve
  ☆796Updated 4 months ago
• wagga40 / Zircolite
  A standalone SIGMA-based detection tool for EVTX, Auditd and Sysmon for Linux logs
  ☆778Updated this week
• mandiant / SilkETW
  ☆823Updated 2 years ago
• strontic / xcyclopedia
  Encyclopedia for Executables
  ☆472Updated 4 years ago
• omerbenamram / evtx
  A Fast (and safe) parser for the Windows XML Event Log (EVTX) format
  ☆875Updated last month
• zeronetworks / rpcfirewall
  ☆532Updated 8 months ago
• EricZimmerman / PECmd
  Prefetch Explorer Command Line
  ☆280Updated last year
• EricZimmerman / MFTECmd
  Parses $MFT from NTFS file systems
  ☆292Updated 9 months ago
• MBCProject / mbc-markdown
  MBC content in markdown
  ☆520Updated 7 months ago
• persistence-info / persistence-info.github.io
  ☆520Updated 2 years ago
• airbus-cert / Winshark
  A wireshark plugin to instrument ETW
  ☆579Updated 4 years ago
• EricZimmerman / LECmd
  Lnk Explorer Command line edition!!
  ☆335Updated last year
• chronicle / GCTI
  ☆553Updated 2 years ago
• sophoslabs / IoCs
  Sophos-originated indicators-of-compromise from published reports
  ☆649Updated 3 weeks ago
• cert-ee / cuckoo3
  Cuckoo3 is a Python 3 open source automated malware analysis system.
  ☆797Updated last month