A YARA & Malware Analysis Toolkit written in Rust.
☆118Aug 13, 2026Updated 3 weeks ago
Alternatives and similar repositories for MalChela
Users that are interested in MalChela are comparing it to the libraries listed below. We may earn a commission when you buy through links labeled 'Ad' on this page.
Sorting:
- PowerShell toolkit for AMSI/Defender detection-boundary analysis and static malware triage maps byte offsets to detection triggers, plus …☆84Jul 28, 2026Updated last month
- Forensic tool for extracting and analyzing Google DriveFS cached files and metadata.☆23May 9, 2025Updated last year
- Contains compiled binaries of Volatility☆37May 18, 2025Updated last year
- Chrome Logs Events and Protobuf Parser☆40Dec 13, 2022Updated 3 years ago
- Run TTPs, with AI!☆142Feb 23, 2026Updated 6 months ago
- Serverless GPU API endpoints on Runpod - Get Bonus Credits • AdSkip the infrastructure headaches. Auto-scaling, pay-as-you-go, no-ops approach lets you focus on innovating your application.
- An easy to use PowerShell script to collect memory and disk forensics for DFIR investigations.☆345Dec 3, 2025Updated 9 months ago
- Just Another broken Registry Parser (JARP)☆16May 23, 2024Updated 2 years ago
- A high-speed forensic timeline engine for Windows forensic artifact CSV output built for DFIR investigators. Quickly consolidate CSV outp…☆335Feb 26, 2026Updated 6 months ago
- A tool for fetching DFIR and other GitHub tools.☆29Aug 2, 2025Updated last year
- PPLReaper is a Windows UNSIGNED kernel driver + userland companion tool designed to inspect and manipulate Protected Process Light (PPL) …☆24Mar 4, 2026Updated 6 months ago
- Sh3ller is a lightweight C2 framework in its simplest form.☆33Sep 5, 2025Updated 11 months ago
- Windows Forensics Environment Builder☆190Aug 1, 2026Updated last month
- A powerful macOS triage collection tool designed for forensic analysis. It gathers critical system artifacts such as FSEvents, Spotlight,…☆49Oct 24, 2025Updated 10 months ago
- Scripts to for ready-to-use Velociraptor instance deployment in Azure☆14Jun 27, 2023Updated 3 years ago
- Deploy to Railway using AI coding agents - Free Credits Offer • AdUse Claude Code, Codex, OpenCode, and more. Autonomous software development now has the infrastructure to match with Railway.
- Windows forensics Engine☆111Aug 8, 2026Updated 3 weeks ago
- PowerShell scripts for running Magnet RESPONSE forensic collection tool in large enterprises.☆36Jan 9, 2025Updated last year
- ☆38Mar 19, 2026Updated 5 months ago
- ☆83Oct 2, 2025Updated 11 months ago
- It’s an OSINT reconnaissance poc powered by Local LLMs (Ollama). You can feed it an email, domain, or IP, and it automatically performs m…☆85Nov 20, 2025Updated 9 months ago
- BitUnlocker is a minimal, interactive Bash script that helps unlock BitLocker volumes and either decrypt them to an image file or mount t…☆15Aug 21, 2025Updated last year
- Automatic/Custom Destinations & LNK (MS-SHLLINK) Browser☆51Aug 16, 2026Updated 2 weeks ago
- PowerShell 'Hero': scripts for DFIR and automation with a PowerShell menu example.☆37Jul 11, 2023Updated 3 years ago
- macOS forensic acquisition made simple☆297Jun 2, 2026Updated 3 months ago
- Serverless GPU API endpoints on Runpod - Get Bonus Credits • AdSkip the infrastructure headaches. Auto-scaling, pay-as-you-go, no-ops approach lets you focus on innovating your application.
- DFIR Timeline Analysis for macOS — SQLite-backed viewer for CSV, TSV, XLSX, EVTX, Plaso, $MFT, and $J files with AI Artifacts, AI Secret …☆354Aug 24, 2026Updated last week
- Windows EVTX log analysis for DFIR — fast parsing, ATT&CK mapping, IOC extraction, and Sentinel anomaly detection. Normal + Juggernaut Mo…☆56Aug 24, 2026Updated last week
- Fork this repo! Do a Pull Request! As many times as you want! Learn the ins and outs of how to contribute to GitHub! Make your mistakes h…☆15Jun 21, 2024Updated 2 years ago
- Automatic, fast parsing of browser artifacts☆17Jan 4, 2025Updated last year
- A GeoIP lookup utility utilizing ipinfo.io services.☆30Updated this week
- A C# PE loader for x64 and x86 PE files.☆58Mar 9, 2026Updated 5 months ago
- Suzaku (朱雀) is a sigma-based threat hunting and fast forensics timeline generator for cloud logs.☆221Updated this week
- yara detection rules for hunting with the threathunting-keywords project☆166May 11, 2025Updated last year
- A DFIR Incident Response AI bot using local Ollama LLM to derrive automated findings from logs☆17Jan 17, 2026Updated 7 months ago
- 1-Click AI Models by DigitalOcean Gradient • AdDeploy popular AI models on DigitalOcean Gradient GPU virtual machines with just a single click. Zero configuration with optimized deployments.
- ☆22Dec 22, 2020Updated 5 years ago
- shellcode transformation tool for YARA evasion☆62Dec 17, 2025Updated 8 months ago
- Rolling Timeline for Incident Recorder.☆14Dec 4, 2023Updated 2 years ago
- IoC Ninja is a Binary Ninja plugin that can improve the QoL of malware analysts.☆17Nov 18, 2025Updated 9 months ago
- Turn a supported list of filetypes (e.g. .docx) into a markdown structured text file. Also optionally defangs indicators and extract text…☆12Aug 3, 2026Updated last month
- ☆15Nov 25, 2021Updated 4 years ago
- Thor Artifacts for Velociraptor☆19Dec 2, 2025Updated 9 months ago