A YARA & Malware Analysis Toolkit written in Rust.
☆95Feb 15, 2026Updated 2 weeks ago
Alternatives and similar repositories for MalChela
Users that are interested in MalChela are comparing it to the libraries listed below
Sorting:
- 🌐 [ New Chrome Cookies ] AVM-Tools - Advanced FUD Stealer. Features: Credential Extraction (Passwords, Cookies, Autofill), Discord Sessi…☆27Updated this week
- Forensic tool for extracting and analyzing Google DriveFS cached files and metadata.☆19May 9, 2025Updated 9 months ago
- Contains compiled binaries of Volatility☆36May 18, 2025Updated 9 months ago
- A powerful macOS triage collection tool designed for forensic analysis. It gathers critical system artifacts such as FSEvents, Spotlight,…☆35Oct 24, 2025Updated 4 months ago
- PowerShell 'Hero': scripts for DFIR and automation with a PowerShell menu example.☆37Jul 11, 2023Updated 2 years ago
- PowerShell Script for Agentless Incident Response☆25Apr 5, 2018Updated 7 years ago
- Scripts to for ready-to-use Velociraptor instance deployment in Azure☆14Jun 27, 2023Updated 2 years ago
- Linux BPF plugins for Volatility3☆23Jan 19, 2024Updated 2 years ago
- PowerShell scripts for running Magnet RESPONSE forensic collection tool in large enterprises.☆30Jan 9, 2025Updated last year
- Chrome Logs Events and Protobuf Parser☆39Dec 13, 2022Updated 3 years ago
- Follow the trail of breadcrumbs left behind by any user on a computer or mounted disk image.☆32Aug 28, 2025Updated 6 months ago
- Fork this repo! Do a Pull Request! As many times as you want! Learn the ins and outs of how to contribute to GitHub! Make your mistakes h…☆14Jun 21, 2024Updated last year
- macOS Artifacts☆33Mar 2, 2025Updated last year
- Rewrite to fit my needs☆32Jul 20, 2024Updated last year
- Docker container running cowrie with DShield output enabled.☆17Jun 8, 2016Updated 9 years ago
- Automatic, fast parsing of browser artifacts☆17Jan 4, 2025Updated last year
- Just Another broken Registry Parser (JARP)☆16May 23, 2024Updated last year
- CryptnetURLCacheParser is a tool to parse CryptAPI cache files☆21Aug 3, 2024Updated last year
- An easy to use PowerShell script to collect memory and disk forensics for DFIR investigations.☆341Dec 3, 2025Updated 3 months ago
- Purple-team telemetry & simulation toolkit.☆108Dec 16, 2025Updated 2 months ago
- Welcome to the SEKOIA.IO Community repository!☆178Feb 6, 2026Updated last month
- Generate Indexes from SANS PDFs☆18Jun 3, 2024Updated last year
- Deep Packet Inspection • Traffic Forensics • Network Threat Detection☆44Feb 20, 2026Updated 2 weeks ago
- Chiron Unpacker, developed by the Malwation MTR Team, is an Unpacker for Packers using the Assembly.Load function.☆22Oct 10, 2024Updated last year
- Simple Project that Extracts PE Information.☆21Apr 4, 2025Updated 11 months ago
- macOS forensic acquisition made simple☆220Feb 14, 2026Updated 2 weeks ago
- Various PowerShells scripts I've made (or others have made) to automate some of the boring stuff in my everyday DFIR journey!☆51Jan 9, 2026Updated last month
- A high-speed forensic timeline engine for Windows forensic artifact CSV output built for DFIR investigators. Quickly consolidate CSV outp…☆309Feb 26, 2026Updated last week
- A simple tool designed to create Atomic Red Team tests with ease.☆49Mar 11, 2025Updated 11 months ago
- Simplify AnyDesk log analysis by effortlessly searching, extracting, and generating reports on IP addresses and login dates.☆18May 31, 2024Updated last year
- A Kubernetes Forensic Collection Framework for Azure Kubernetes Service☆41Feb 9, 2026Updated 3 weeks ago
- An experimental script to perform bulk parsing of arbitrary file features with YARA and console logging.☆21Nov 13, 2022Updated 3 years ago
- Digital forensic analysis tool that provides a user-friendly interface for investigating disk images.☆208Nov 12, 2025Updated 3 months ago
- Maintained by the ANY.RUN team, this repository provides YARA rules to help detect and classify various malware families and other malici…☆26Nov 1, 2025Updated 4 months ago
- Cloud-native SIEM for intelligent security analytics for your entire enterprise.☆20Apr 4, 2023Updated 2 years ago
- MAPS cloud scanner and response parser for Microsoft Defender research.☆74Feb 19, 2026Updated 2 weeks ago
- A simple website to act as a store for havoc modules and extensions☆28Jan 20, 2025Updated last year
- THP Forensic Challenges☆23Jul 28, 2023Updated 2 years ago
- Yet another shellcode loader - but a sneaky one☆25Apr 16, 2025Updated 10 months ago