Alternatives and similar repositories for rekall:

Users that are interested in rekall are comparing it to the libraries listed below

• 504ensicsLabs / LiME
  LiME (formerly DMD) is a Loadable Kernel Module (LKM), which allows the acquisition of volatile memory from Linux and Linux-based devices…
  ☆1,794Updated 5 months ago
• viper-framework / viper
  Binary analysis and management framework
  ☆1,542Updated last year
• log2timeline / plaso
  Super timeline all the things
  ☆1,803Updated 3 weeks ago
• Rurik / Noriben
  Noriben - Portable, Simple, Malware Analysis Sandbox
  ☆1,143Updated last year
• mandiant / flare-fakenet-ng
  FakeNet-NG - Next Generation Dynamic Network Analysis Tool
  ☆1,876Updated 2 months ago
• Cisco-Talos / pyrebox
  Python scriptable Reverse Engineering Sandbox, a Virtual Machine instrumentation and inspection framework based on QEMU
  ☆1,662Updated last year
• mandiant / flare-floss
  FLARE Obfuscated String Solver - Automatically extract obfuscated strings from malware.
  ☆3,462Updated 2 weeks ago
• google / grr
  GRR Rapid Response: remote live forensics for incident response
  ☆4,859Updated 3 weeks ago
• tklengyel / drakvuf
  DRAKVUF Black-box Binary Analysis
  ☆1,099Updated last week
• JusticeRage / Manalyze
  A static analyzer for PE executables.
  ☆1,047Updated last year
• crits / crits
  CRITs - Collaborative Research Into Threats
  ☆900Updated 5 years ago
• Neo23x0 / yarGen
  yarGen is a generator for YARA rules
  ☆1,617Updated 9 months ago
• tomchop / malcom
  Malcom - Malware Communications Analyzer
  ☆1,157Updated 7 years ago
• sleuthkit / sleuthkit
  The Sleuth Kit® (TSK) is a library and collection of command line digital forensics tools that allow you to investigate volume and file s…
  ☆2,752Updated this week
• buffer / thug
  Python low-interaction honeyclient
  ☆1,006Updated last week
• cuckoosandbox / cuckoo
  Cuckoo Sandbox is an automated dynamic malware analysis system
  ☆5,633Updated 2 years ago
• Yara-Rules / rules
  Repository of yara rules
  ☆4,321Updated 11 months ago
• volatilityfoundation / volatility
  An advanced memory forensics framework
  ☆7,589Updated last year
• VirusTotal / yara-python
  The Python interface for YARA
  ☆684Updated last week
• certsocietegenerale / fame
  FAME Automates Malware Evaluation
  ☆882Updated last month
• ForensicArtifacts / artifacts
  Digital Forensics artifact repository
  ☆1,093Updated 2 months ago
• hatching / vmcloak
  Automated Virtual Machine Generation and Cloaking for Cuckoo Sandbox.
  ☆496Updated 10 months ago
• google / timesketch
  Collaborative forensic timeline analysis
  ☆2,712Updated this week
• omriher / CapTipper
  Malicious HTTP traffic explorer
  ☆717Updated 2 years ago
• Invoke-IR / PowerForensics
  PowerForensics provides an all in one platform for live disk forensic analysis
  ☆1,394Updated last year
• GoSecure / malboxes
  Builds malware analysis Windows VMs so that you don't have to.
  ☆1,039Updated 3 years ago
• volatilityfoundation / profiles
  Volatility profiles for Linux and Mac OS X
  ☆321Updated 2 years ago
• certsocietegenerale / FIR
  Fast Incident Response
  ☆1,848Updated last week
• vivisect / vivisect
  ☆957Updated last month
• eset / malware-ioc
  Indicators of Compromises (IOC) of our various investigations
  ☆1,742Updated this week