Workshop: Forensic Analysis of eBPF based Linux Rootkits
☆15Jul 9, 2026Updated last month
Alternatives and similar repositories for bpf-rootkit-workshop
Users that are interested in bpf-rootkit-workshop are comparing it to the libraries listed below. We may earn a commission when you buy through links labeled 'Ad' on this page.
Sorting:
- Carve $MFT records from a chunk of data (for instance a memory dump)☆16Aug 21, 2016Updated 10 years ago
- A Volatility plugin to detect hidden Linux Kernel Modules☆17Jul 11, 2025Updated last year
- Mount VSCs with ease!☆18Apr 28, 2026Updated 4 months ago
- Linux BPF plugins for Volatility3☆23Jan 19, 2024Updated 2 years ago
- Volatility3 Linux profiles☆84Aug 18, 2026Updated last week
- Wordpress hosting with auto-scaling - Free Trial Offer • AdFully Managed hosting for WordPress and WooCommerce businesses that need reliable, auto-scalable performance. Cloudways SafeUpdates now available.
- Hunt for SQLite files used by various applications☆31Jun 17, 2026Updated 2 months ago
- AI analyzer for Hayabusa results.☆27Aug 22, 2026Updated last week
- Obfuscate payloads using IPv4, IPv6, MAC or UUID strings☆25Feb 17, 2024Updated 2 years ago
- This repository contains a variety of plugins and scripts, related to the Volatility framework.☆19Feb 9, 2025Updated last year
- Triage automation tool☆22Aug 19, 2026Updated last week
- 读过的安全文章离线归档 | begin in 2023.11.23☆18Jun 4, 2024Updated 2 years ago
- Plugins for parsing CSV files in Timeline Explorer. This project allows for anyone to add more supported files (i,e. they get a Line #/ta…☆35Jun 5, 2026Updated 2 months ago
- Binaries for the log2timeline projects and dependencies☆39Updated this week
- A few STUXNET samples and live traffic captures from July 2010 while many stuxnet implants were still operational.☆28Sep 17, 2024Updated last year
- Managed hosting for WordPress and PHP on Cloudways • AdManaged hosting for WordPress, Magento, Laravel, or PHP apps, on multiple cloud providers. Deploy in minutes on Cloudways by DigitalOcean.
- A collection of PowerShell scripts for analyzing macOS Forensic Artifacts☆34Mar 16, 2026Updated 5 months ago
- An advanced parser for INDX records☆30Aug 7, 2019Updated 7 years ago
- Various examples of using eBPF code☆18Jan 3, 2024Updated 2 years ago
- ☆19May 22, 2024Updated 2 years ago
- RNNs for sql-injection detection 🔍. built in python with tensorflow and keras☆12Sep 14, 2024Updated last year
- Neural network RDP cache reconstruction tool☆34May 21, 2026Updated 3 months ago
- Outil d'investigation open-source avec visualisation de graphe, analyse temporelle et collaboration temps réel via mesh networking. Carto…☆21Updated this week
- This repository provides a comprehensive Digital Footprint Checklist to help individuals manage their online presence and enhance privacy…☆18Dec 25, 2024Updated last year
- Copy stdin to stdout and stderr, unbuffered☆13Nov 29, 2023Updated 2 years ago
- GPU virtual machines on DigitalOcean Gradient AI • AdGet to production fast with high-performance AMD and NVIDIA GPUs you can spin up in seconds. The definition of operational simplicity.
- python3 version of cloacked-pixel.☆14Oct 8, 2022Updated 3 years ago
- Parses RecentFileCacheParser.bcf files☆31Apr 30, 2026Updated 4 months ago
- Linux内核驱动demo仓（lkm、ldd）☆13Apr 24, 2025Updated last year
- Sandbox samples and monitor them with kunai☆29Jul 21, 2026Updated last month
- halium 11 ubports for herolte, hero2lte and gracerlte☆11Aug 27, 2025Updated last year
- Zero-dependency Linux memory forensics, leveraging kernel-embedded BTF and kallsyms for type-aware memory analysis without external debug…☆184Updated this week
- Forensic Browser History Analyzer - Cross-platform browser history extractor (Chrome, Firefox, IE/Edge, Brave, Opera, Vivaldi)☆38Aug 7, 2026Updated 3 weeks ago
- Governance Platform by @NC3-LU☆13Updated this week
- Golang 写的免杀框架，通过系统调用等手法bypass AV/EDR☆23Jul 11, 2024Updated 2 years ago
- Managed hosting for WordPress and PHP on Cloudways • AdManaged hosting for WordPress, Magento, Laravel, or PHP apps, on multiple cloud providers. Deploy in minutes on Cloudways by DigitalOcean.
- A PoC to deploy a Sliver Agent with amsi bypass, process injection, hollowing and OpSec☆34Oct 2, 2024Updated last year
- Finds event logs between two time points. Useful for helpdesk/support/malware analysis.☆50Feb 26, 2019Updated 7 years ago
- ☆15Mar 1, 2023Updated 3 years ago
- VMDK Forensic Artifact Extractor (VFAE) is windows based tool written in C++ that extracts files with a known location from VMDK images r…☆17Aug 7, 2015Updated 11 years ago
- Framework for collecting user feedback for apps via telemetry and surveys☆15Updated this week
- 针对windows rootkit的一些检测，分别从进程、端口、文件这三个方面进行检测。☆21Jan 16, 2025Updated last year
- Collection of scripts provided for public use☆44Aug 19, 2026Updated last week