dhondta / AppmemDumperLinks
Forensics triage tool relying on Volatility and Foremost
☆26Updated last year
Alternatives and similar repositories for AppmemDumper
Users that are interested in AppmemDumper are comparing it to the libraries listed below
Sorting:
- ☆22Updated 4 years ago
- Do the unexpected with AD GPO processing☆9Updated 6 years ago
- Light System Examination Toolkit (LISET) - logs & activity & configuration gathering utility that comes handy in fast Windows incident re…☆31Updated 8 years ago
- windows-operating-system-archaeology @Enigma0x3 @subTee☆46Updated 8 years ago
- Convert Windows Netmon Monitor Mode Wireless Packet Captures to Libpcap Format☆15Updated 5 years ago
- Python emulator for Excel XLM macros.☆18Updated 5 years ago
- Script to parse Process Monitor XML log file, and give you a summary report.☆23Updated 9 years ago
- ☆26Updated 5 years ago
- Rekall Forensics and Incident Response Framework with rVMI extensions☆33Updated 4 years ago
- isodump - ISO dump utility☆40Updated 6 years ago
- This is a python version of samesame repo to generate homograph strings☆23Updated 6 years ago
- This script will pull and analyze syscalls in given application(s) allowing for easier security research purposes☆21Updated 4 years ago
- GUI Tool to generate threat intelligence information in various formats☆43Updated 7 years ago
- This is a repository for the public blog with Labs indicators of compromise and code☆18Updated 5 years ago
- ☆30Updated 6 years ago
- A collection of threat intelligence data such as IOC, Yara and Snort/Suricata Rules etc.☆10Updated 5 years ago
- MalRecon - Basic Malware Reconnaissance and Analysis Tool☆26Updated 8 years ago
- Plugins for the Viper Framework☆14Updated 5 years ago
- Notebooks created to attack and secure Active Directory environments☆27Updated 5 years ago
- Useful Windows and AD tools☆15Updated 3 years ago
- Miscellaneous exploit scripts☆17Updated 3 years ago
- ☆12Updated 4 years ago
- ☆17Updated 3 years ago
- This tool aims at automating the identification of potential service running behind ports identified manually either through manual scan …☆52Updated 4 years ago
- ☆35Updated 6 years ago
- This is a repository for the public blog with Labs indicators of compromise.☆10Updated 5 years ago
- Clone of PDFiD by Didier Stevens, as a package and with some improvements.☆38Updated 9 years ago
- module for certexfil☆15Updated 3 years ago
- Script to pull newly-registered domains and check for similarity against a provided word list.☆13Updated 4 years ago
- Autopsy Module to analyze Registry Hives☆15Updated 3 years ago