Workshop: Forensic Analysis of eBPF based Linux Rootkits
☆15Jul 9, 2026Updated 3 months ago
Alternatives and similar repositories for bpf-rootkit-workshop
Users that are interested in bpf-rootkit-workshop are comparing it to the libraries listed below. We may earn a commission when you buy through links labeled 'Ad' on this page.
Sorting:
- Carve $MFT records from a chunk of data (for instance a memory dump)☆16Aug 21, 2016Updated 10 years ago
- A Volatility plugin to detect hidden Linux Kernel Modules☆17Jul 11, 2025Updated last year
- Quick ESXi Log Parser☆33Jul 21, 2026Updated 2 months ago
- Mount VSCs with ease!☆18Apr 28, 2026Updated 5 months ago
- Linux BPF plugins for Volatility3☆23Jan 19, 2024Updated 2 years ago
- Deploy to Railway using AI coding agents - Free Credits Offer • AdUse Claude Code, Codex, OpenCode, and more. Autonomous software development now has the infrastructure to match with Railway.
- Volatility3 Linux profiles☆83Aug 18, 2026Updated last month
- Hunt for SQLite files used by various applications☆32Oct 1, 2026Updated last week
- AI analyzer for Hayabusa results.☆27Aug 22, 2026Updated last month
- Obfuscate payloads using IPv4, IPv6, MAC or UUID strings☆25Feb 17, 2024Updated 2 years ago
- This repository contains a variety of plugins and scripts, related to the Volatility framework.☆19Feb 9, 2025Updated last year
- Triage automation tool☆23Sep 28, 2026Updated last week
- Plugins for parsing CSV files in Timeline Explorer. This project allows for anyone to add more supported files (i,e. they get a Line #/ta…☆36Jun 5, 2026Updated 4 months ago
- Official repository for CTFTiny☆20Mar 10, 2026Updated 6 months ago
- Binaries for the log2timeline projects and dependencies☆39Sep 28, 2026Updated last week
- Wordpress hosting with auto-scaling - Free Trial Offer • AdFully Managed hosting for WordPress and WooCommerce businesses that need reliable, auto-scalable performance. Cloudways SafeUpdates now available.
- A collection of PowerShell scripts for analyzing macOS Forensic Artifacts☆35Mar 16, 2026Updated 6 months ago
- Set of scripts to index PCAP files and retrieve packets☆14Sep 10, 2015Updated 11 years ago
- An advanced parser for INDX records☆30Aug 7, 2019Updated 7 years ago
- iptables-trace is an eBPF enhanced iptables-TRACE alternative iptables TRACE. GPL-3.0 license☆14Feb 3, 2025Updated last year
- ☆25May 12, 2026Updated 4 months ago
- Neural network RDP cache reconstruction tool☆34May 21, 2026Updated 4 months ago
- Various examples of using eBPF code☆18Jan 3, 2024Updated 2 years ago
- ☆18May 22, 2024Updated 2 years ago
- RNNs for sql-injection detection 🔍. built in python with tensorflow and keras☆12Sep 14, 2024Updated 2 years ago
- Deploy to Railway using AI coding agents - Free Credits Offer • AdUse Claude Code, Codex, OpenCode, and more. Autonomous software development now has the infrastructure to match with Railway.
- MalwareScan is a lightweight and fast malware scanner written in Python. It supports both Windows and Linux platforms and provides an ope…☆14Jun 2, 2025Updated last year
- Outil d'investigation open-source avec visualisation de graphe, analyse temporelle et collaboration temps réel via mesh networking. Carto…☆26Updated this week
- This repository provides a comprehensive Digital Footprint Checklist to help individuals manage their online presence and enhance privacy…☆18Dec 25, 2024Updated last year
- python3 version of cloacked-pixel.☆14Oct 8, 2022Updated 4 years ago
- Parses RecentFileCacheParser.bcf files☆31Apr 30, 2026Updated 5 months ago
- Linux内核驱动demo仓（lkm、ldd）☆13Apr 24, 2025Updated last year
- Sandbox samples and monitor them with kunai☆31Jul 21, 2026Updated 2 months ago
- This repository is a transcription of the code from the YouTube channel 'Learn to Computer' (https://www.youtube.com/channel/UCcFVlUyZm22…☆11Jun 24, 2020Updated 6 years ago
- Zero-dependency Linux memory forensics, leveraging kernel-embedded BTF and kallsyms for type-aware memory analysis without external debug…☆186Updated this week
- Managed Database hosting by DigitalOcean • AdPostgreSQL, MySQL, MongoDB, Kafka, Valkey, and OpenSearch available. Automatically scale up storage and focus on building your apps.
- A lightweight workshop build on the shoulders of giants.☆18Sep 13, 2019Updated 7 years ago
- Forensic Browser History Analyzer - Cross-platform browser history extractor (Chrome, Firefox, IE/Edge, Brave, Opera, Vivaldi)☆40Sep 27, 2026Updated last week
- CTF challenges created by @minaminao☆24Jun 22, 2026Updated 3 months ago
- Common code for hardening benchmarks☆10Jul 14, 2025Updated last year
- Governance Platform by @NC3-LU☆13Updated this week
- Golang 写的免杀框架，通过系统调用等手法bypass AV/EDR☆23Jul 11, 2024Updated 2 years ago
- Finds event logs between two time points. Useful for helpdesk/support/malware analysis.☆50Feb 26, 2019Updated 7 years ago