Alternatives and similar repositories for Volatility-BitLocker

Users that are interested in Volatility-BitLocker are comparing it to the libraries listed below

• JPCERTCC / Windows-Symbol-Tables
  Windows symbol tables for Volatility 3
  ☆88Updated last year
• kevthehermit / volatility_symbols
  Volatility Symbol Generator for Linux Kernels
  ☆35Updated last year
• sk4la / volatility3-docker
  Volatility, on Docker 🐳
  ☆34Updated 3 months ago
• Malandrone / PowerDecode
  PowerDecode is a PowerShell-based tool that allows to deobfuscate PowerShell scripts obfuscated across multiple layers. The tool performs…
  ☆195Updated last year
• Velocidex / Linpmem
  Linpmem is a linux memory acquisition tool
  ☆85Updated 3 weeks ago
• Abyss-W4tcher / volatility2-profiles
  Collection of Volatility2 profiles, generated against Linux kernels.
  ☆44Updated 3 weeks ago
• mgeeky / msidump
  MSI Dump - a tool that analyzes malicious MSI installation packages, extracts files, streams, binary data and incorporates YARA scanner.
  ☆212Updated 2 years ago
• airbus-cert / minusone
  Powershell Linter
  ☆62Updated 2 weeks ago
• Banaanhangwagen / WINHELLO2hashcat
  ☆74Updated 3 years ago
• forensicxlab / VISION-ProcMon
  A ProcessMonitor visualization application written in rust.
  ☆181Updated last year
• Immersive-Labs-Sec / SliverC2-Forensics
  A collection of tools and detections for the Sliver C2 Frameworj
  ☆127Updated 2 years ago
• airbus-cert / yara-ttd
  Use YARA rules on Time Travel Debugging traces
  ☆92Updated 2 years ago
• volatilityfoundation / community3
  Volatility3 plugins developed and maintained by the community
  ☆59Updated 2 years ago
• LETHAL-FORENSICS / Collect-MemoryDump
  Collect-MemoryDump - Automated Creation of Windows Memory Snapshots for DFIR
  ☆242Updated 3 months ago
• knez / defender-dump
  Dump quarantined files from Windows Defender
  ☆64Updated 3 years ago
• tijldeneut / dpapilab-ng
  DPAPILAB Next Gen, script collection
  ☆87Updated 2 years ago
• jstrosch / sclauncher
  A small program written in C that is designed to load 32/64-bit shellcode and allow for execution or debugging. Can also output PE files …
  ☆154Updated 11 months ago
• volexity / GoResolver
  GoResolver is a Go analysis tool using both Go symbol extraction and Control Flow Graph (CFG) similarity to identify and resolve the func…
  ☆66Updated 2 months ago
• SafeBreach-Labs / aikido_wiper
  ☆67Updated 2 years ago
• p0dalirius / volatility3-symbols
  Memory mapping profiles for forensic analysis using volatility 3
  ☆27Updated 3 years ago
• airbus-cert / vbSparkle
  VBScript & VBA source-to-source deobfuscator with partial-evaluation
  ☆79Updated 11 months ago
• GDATAAdvancedAnalytics / winreg-tasks
  ☆19Updated 3 years ago
• keydet89 / RegRipper4.0
  RegRipper4.0
  ☆56Updated 2 months ago
• BSI-Bund / RdpCacheStitcher
  RdpCacheStitcher is a tool that supports forensic analysts in reconstructing useful images out of RDP cache bitmaps.
  ☆273Updated last year
• andigandhi / bitpixie
  bitpixie Proof of Concept - Bitlocker Decryptor
  ☆74Updated 3 weeks ago
• fox-it / dissect.cobaltstrike
  Python library for dissecting and parsing Cobalt Strike related data such as Beacon payloads and Malleable C2 Profiles
  ☆171Updated 3 weeks ago
• volexity / donut-decryptor
  Retrieve inner payloads from Donut samples
  ☆102Updated last year
• Unprotect-Project / Unprotect_Submission
  Unprotect is a collaborative platform dedicated to uncovering and documenting malware evasion techniques. We invite you to join us in thi…
  ☆165Updated 3 months ago
• MagnetForensics / dumpit-linux
  Memory acquisition for Linux that makes sense.
  ☆199Updated last year
• Abyss-W4tcher / volatility3-symbols
  Collection of Linux and macOS Volatility3 Intermediate Symbol Files (ISF), suitable for memory analysis 🔍
  ☆160Updated 3 weeks ago