Alternatives and similar repositories for dfrws2018-challenge

Users that are interested in dfrws2018-challenge are comparing it to the libraries listed below

• PoorBillionaire / Windows-Prefetch-Parser
  Parse Windows Prefetch files: Supports XP - Windows 10 Prefetch files
  ☆118Updated last year
• matonis / page_brute
  Page File analysis tools.
  ☆127Updated 9 years ago
• mandiant / win10_volatility
  An advanced memory forensics framework
  ☆94Updated 5 years ago
• kd8bny / LiMEaide
  A python application designed to remotely dump RAM of a Linux client and create a volatility profile for later analysis on your local hos…
  ☆161Updated 4 years ago
• lancemueller / EnCase-EnScripts
  General repository for compiled and uncompiled EnCase EnScripts
  ☆46Updated 4 years ago
• ashemery / CuckooVM
  Cuckoo running in a nested hypervisor
  ☆128Updated 5 years ago
• williballenthin / EVTXtract
  EVTXtract recovers and reconstructs fragments of EVTX log files from raw binary data, including unallocated space and memory images.
  ☆195Updated 3 months ago
• tomchop / volatility-autoruns
  Autoruns plugin for the Volatility framework
  ☆122Updated 5 years ago
• 504ensicsLabs / DAMM
  Differential Analysis of Malware in Memory
  ☆212Updated 8 years ago
• MITRECND / malchive
  Various capabilities for static malware analysis.
  ☆78Updated 10 months ago
• kevthehermit / VolUtility
  Web App for Volatility framework
  ☆381Updated 7 months ago
• SparkITSolutions / phoenix
  Cuckoo Sandbox is an automated dynamic malware analysis system
  ☆107Updated 5 years ago
• dgunter / evtxtoelk
  A lightweight tool to load Windows Event Log evtx files into Elasticsearch.
  ☆117Updated 4 years ago
• mgoffin / malwarecookbook
  Malware Analyst's Cookbook stuffs
  ☆156Updated 9 years ago
• tomchop / unxor
  unXOR will search a XORed file and try to guess the key using known-plaintext attacks.
  ☆142Updated 5 years ago
• sapphirex00 / Threat-Hunting
  Personal compilation of APT malware from whitepaper releases, documents and own research
  ☆260Updated 6 years ago
• phage-nz / infosec-bazaar
  A collection of infosec related scripts and information.
  ☆53Updated 9 months ago
• H2Cyber / VolDiff
  VolDiff: Malware Memory Footprint Analysis based on Volatility
  ☆194Updated 7 years ago
• CERT-Polska / training-materials
  ☆51Updated 6 years ago
• WithSecureLabs / snake
  snake - a malware storage zoo
  ☆216Updated last year
• Xumeiquer / yara-forensics
  Set of Yara rules for finding files using magics headers
  ☆138Updated 4 years ago
• JPCERTCC / DetectLM
  Detecting Lateral Movement with Machine Learning
  ☆138Updated 7 years ago
• kevthehermit / YaraPcap
  Process HTTP Pcaps With YARA
  ☆103Updated 11 years ago
• airbus-cert / regrippy
  A modern Python-3-based alternative to RegRipper
  ☆197Updated 3 months ago
• tehsyntx / loffice
  Lazy Office Analyzer
  ☆122Updated 8 years ago
• 0x4D31 / deception-as-detection
  Deception based detection techniques mapped to the MITRE’s ATT&CK framework
  ☆289Updated 7 years ago
• unixfreaxjp / malwaremustdie
  repository of tools & resources of the MMD team
  ☆131Updated 2 years ago
• dfrws / dfrws2017-challenge
  The DFRWS 2017 challenge (extended into 2018) is about Internet of Things (IoT), defined generally to include network and Internet connec…
  ☆21Updated 3 years ago
• SCILabsMX / yaraZeekAlert
  This script scans the files extracted by Zeek with YARA rules located on the rules folder on a Linux based Zeek sensor, if there is a mat…
  ☆62Updated last year
• OMENScan / AChoir
  Windows Live Artifacts Acquisition Script
  ☆188Updated 3 years ago