Alternatives and similar repositories for Volatility-BitLocker:

Users that are interested in Volatility-BitLocker are comparing it to the libraries listed below

• JPCERTCC / Windows-Symbol-Tables
  Windows symbol tables for Volatility 3
  ☆81Updated 8 months ago
• airbus-cert / vbSparkle
  VBScript & VBA source-to-source deobfuscator with partial-evaluation
  ☆75Updated 7 months ago
• kevthehermit / volatility_symbols
  Volatility Symbol Generator for Linux Kernels
  ☆34Updated last year
• airbus-cert / minusone
  Powershell Linter
  ☆50Updated last week
• volatilityfoundation / community3
  Volatility3 plugins developed and maintained by the community
  ☆51Updated 2 years ago
• tijldeneut / dpapilab-ng
  DPAPILAB Next Gen, script collection
  ☆82Updated 2 years ago
• ufrisk / MemProcFS-plugins
  ☆54Updated 5 months ago
• edygert / runsc
  runsc loads 32/64 bit shellcode (depending on how runsc is compiled) in a way that makes it easy to load in a debugger. This code is base…
  ☆36Updated 2 years ago
• kacos2000 / Prefetch-Browser
  Browse Windows Prefetch versions: 17,23,26,30v1/2,31 & some of SuperFetch .7db/.db's
  ☆60Updated 3 months ago
• harelsegev / prefetch-hash-cracker
  A small util to brute-force prefetch hashes
  ☆76Updated 2 years ago
• magicsword-io / bootloaders
  bootloaders.io is a curated list of known malicious bootloaders for various operating systems. The project aims to assist security profes…
  ☆51Updated last year
• tribalchicken / volatility-bitlocker
  Volatility plugin to extract BitLocker Full Volume Encryption Keys (FVEK)
  ☆65Updated 3 years ago
• knez / defender-dump
  Dump quarantined files from Windows Defender
  ☆61Updated 2 years ago
• memoryforensics1 / VolExp
  volatility explorer
  ☆91Updated 4 years ago
• sk4la / volatility3-docker
  Volatility, on Docker 🐳
  ☆33Updated 8 months ago
• WithSecureLabs / GarbageMan
  GarbageMan is a set of tools for analyzing .NET binaries through heap analysis.
  ☆115Updated last year
• airbus-cert / yara-ttd
  Use YARA rules on Time Travel Debugging traces
  ☆88Updated last year
• MatheuZSecurity / detect-lkm-rootkit-cheatsheet
  Cheat sheet to detect and remove linux kernel rootkit
  ☆52Updated 3 months ago
• 0x534a / dynmx
  Signature-based detection of malware features based on Windows API call sequences. It's like YARA for sandbox API traces!
  ☆82Updated last year
• daddycocoaman / dumpscan
  Finding secrets in kernel and user memory
  ☆115Updated last year
• forensicxlab / VISION-ProcMon
  A ProcessMonitor visualization application written in rust.
  ☆177Updated last year
• NextronSystems / gimphash
  Imphash-like calculation on Golang binaries
  ☆49Updated 2 years ago
• SafeBreach-Labs / aikido_wiper
  ☆66Updated 2 years ago
• keydet89 / RegRipper4.0
  RegRipper4.0
  ☆48Updated last year
• YoavLevi / IAT-Tracer
  An automation plugin for Tiny-Tracer framework to trace and watch functions directly out of the executable's import table or trace logs (…
  ☆114Updated 8 months ago
• embee-research / Yara-detection-rules
  Yara Rules for Modern Malware
  ☆74Updated last year
• jschicht / SetMace
  Manipulate timestamps on NTFS
  ☆50Updated 10 years ago
• Velocidex / Linpmem
  Linpmem is a linux memory acquisition tool
  ☆78Updated 10 months ago
• fox-it / dissect.cobaltstrike
  Python library for dissecting and parsing Cobalt Strike related data such as Beacon payloads and Malleable C2 Profiles
  ☆163Updated 5 months ago
• Squiblydoo / MalAPIReader
  Reads and prints information from the website MalAPI.io
  ☆19Updated 2 years ago