ahlashkari / VolMemLyzerLinks
VolMemLyzer (Volatility Memory Analyzer) is a feature extraction module which use Volatility plugins to extract memory features to generate a CSV file for each memory snapshot.
☆35Updated last month
Alternatives and similar repositories for VolMemLyzer
Users that are interested in VolMemLyzer are comparing it to the libraries listed below
Sorting:
- Various capabilities for static malware analysis.☆79Updated last year
- The DFRWS 2023 challenge (The Troubled Elevator) takes a deep dive into the domain of Industrial Control Systems (ICS), specifically foc…☆54Updated last year
- MAEC Schemas and Schema Development☆89Updated 5 years ago
- Rules Shared by the Community from 100 Days of YARA 2023☆78Updated 2 years ago
- A guide on how to write fast and memory friendly YARA rules☆157Updated 10 months ago
- ☆161Updated 3 years ago
- Research indicators and detection rules☆67Updated 2 years ago
- YARA rule analyzer to improve rule quality and performance☆107Updated 8 months ago
- Detection Engineering with YARA☆87Updated last year
- YARA rule metadata specification and validation utility / Spécification et validation pour les règles YARA☆113Updated 7 months ago
- A toolkit for the post-mortem examination of Docker containers from forensic HDD copies☆106Updated last year
- Yara Based Detection Engine for web browsers☆49Updated 4 years ago
- Place for resources used during the Mordor Detection hackathon event featuring APT29 ATT&CK evals datasets☆145Updated 5 years ago
- JPCERT/CC public YARA rules repository☆110Updated last month
- MITRE Shield website☆19Updated 4 years ago
- Malware Sandboxes & Malware Source☆102Updated 8 years ago
- Random hunting ordiented yara rules☆98Updated 2 years ago
- Repository with Sample threat hunting notebooks on Security Event Log Data Sources☆69Updated 3 years ago
- Hunt malware with Volatility☆47Updated 5 months ago
- The Windows Malware Analysis Reversing Core Tools☆97Updated 4 years ago
- ☆54Updated last year
- Three datasets to practice Threat Hunting against.☆46Updated last year
- This CALDERA Plugin converts Adversary Emulation Plans from the Center for Threat Informed Defense☆34Updated 2 months ago
- Understanding and analyzing carrier files workshop repo☆51Updated 6 years ago
- Powershell sandboxing utility☆19Updated last week
- Python based CLI for MalwareBazaar☆39Updated 4 months ago
- Augmentation to Machine Readable CTI☆37Updated 3 months ago
- Malware similarity platform with modularity in mind.☆79Updated 4 years ago
- Jupyter Notebooks for Cyber Threat Intelligence☆35Updated 2 years ago
- A community event for security researchers to share their favorite notebooks☆109Updated last year