Alternatives and similar repositories for dff

Users that are interested in dff are comparing it to the libraries listed below

• vitaly-kamluk / bitscout
  Remote forensics meta tool
  ☆474Updated 8 months ago
• markmckinnon / Autopsy-Plugins
  Autopsy Python Plugins
  ☆366Updated 3 months ago
• kevthehermit / VolUtility
  Web App for Volatility framework
  ☆389Updated 4 months ago
• williballenthin / EVTXtract
  EVTXtract recovers and reconstructs fragments of EVTX log files from raw binary data, including unallocated space and memory images.
  ☆201Updated 8 months ago
• teamdfir / sift
  SIFT
  ☆520Updated last year
• SpiderLabs / malware-analysis
  A repository of tools and scripts related to malware analysis
  ☆253Updated 9 years ago
• 504ensicsLabs / DAMM
  Differential Analysis of Malware in Memory
  ☆214Updated 8 years ago
• Neo23x0 / yarAnalyzer
  Yara Rule Analyzer and Statistics
  ☆395Updated 2 years ago
• KasperskyLab / ForensicsTools
  Tools for DFIR
  ☆120Updated 7 years ago
• msuhanov / Linux-write-blocker
  The kernel patch and userspace tools to enable Linux software write blocking
  ☆150Updated 5 years ago
• elceef / bitlocker
  Volatility Framework plugin for extracting BitLocker FVEK (Full Volume Encryption Key)
  ☆239Updated 9 years ago
• OMENScan / AChoir
  Windows Live Artifacts Acquisition Script
  ☆190Updated 3 years ago
• teamdfir / sift-cli
  CLI tool to manage a SIFT Install
  ☆421Updated 2 years ago
• Invoke-IR / ForensicPosters
  ☆454Updated last year
• SupportIntelligence / Icewater
  16,432 Free Yara rules created by
  ☆389Updated 6 years ago
• orlikoski / Skadi
  Collect, Process, and Hunt with host based data from MacOS, Windows, and Linux
  ☆503Updated 3 years ago
• halpomeranz / lmg
  Script for automating Linux memory capture and analysis
  ☆273Updated 5 years ago
• airbus-cert / regrippy
  A modern Python-3-based alternative to RegRipper
  ☆200Updated 7 months ago
• eset / malware-research
  Code written as part of our various malware investigations
  ☆405Updated 10 months ago
• mandiant / ShimCacheParser
  ☆280Updated 2 years ago
• orlikoski / CDQR
  The Cold Disk Quick Response (CDQR) tool is a fast and easy to use forensic artifact parsing tool that works on disk images, mounted driv…
  ☆343Updated 3 years ago
• hiddenillusion / AnalyzePDF
  Tool to help analyze PDF files
  ☆187Updated 11 years ago
• BayshoreNetworks / yextend
  Yara integrated software to handle archive file data.
  ☆320Updated 3 years ago
• REMnux / docker
  This repository contains Dockerfiles for building Docker images of popular malware analysis tools, which are distributed through the REMn…
  ☆290Updated 3 months ago
• doomedraven / VirusTotalApi
  VirusTotal Full api
  ☆305Updated 2 years ago
• log2timeline / dfvfs
  Digital Forensics Virtual File System (dfVFS)
  ☆214Updated last month
• mandiant / ioc_writer
  ☆205Updated 2 years ago
• Te-k / analyst-scripts
  Scripts to analyze stuff
  ☆147Updated 4 months ago
• Velocidex / c-aff4
  An AFF4 C++ implementation.
  ☆211Updated 2 years ago
• mkorman90 / VolatilityBot
  VolatilityBot – An automated memory analyzer for malware samples and memory dumps
  ☆272Updated 4 years ago