Alternatives and similar repositories for rekall

Users that are interested in rekall are comparing it to the libraries listed below

• viper-framework / viper
  Binary analysis and management framework
  ☆1,557Updated 2 years ago
• log2timeline / plaso
  Super timeline all the things
  ☆2,003Updated last week
• Rurik / Noriben
  Noriben - Portable, Simple, Malware Analysis Sandbox
  ☆1,223Updated 5 months ago
• 504ensicsLabs / LiME
  LiME (formerly DMD) is a Loadable Kernel Module (LKM), which allows the acquisition of volatile memory from Linux and Linux-based devices…
  ☆1,929Updated 2 months ago
• mandiant / flare-fakenet-ng
  FakeNet-NG - Next Generation Dynamic Network Analysis Tool
  ☆2,063Updated last month
• google / grr
  GRR Rapid Response: remote live forensics for incident response
  ☆5,029Updated last month
• GoSecure / malboxes
  Builds malware analysis Windows VMs so that you don't have to.
  ☆1,046Updated 4 years ago
• buffer / thug
  Python low-interaction honeyclient
  ☆1,021Updated 3 weeks ago
• Cisco-Talos / pyrebox
  Python scriptable Reverse Engineering Sandbox, a Virtual Machine instrumentation and inspection framework based on QEMU
  ☆1,680Updated last year
• eset / malware-ioc
  Indicators of Compromises (IOC) of our various investigations
  ☆1,913Updated last month
• ForensicArtifacts / artifacts
  Digital Forensics artifact repository
  ☆1,191Updated last week
• tomchop / malcom
  Malcom - Malware Communications Analyzer
  ☆1,165Updated 8 years ago
• JusticeRage / Manalyze
  A static analyzer for PE executables.
  ☆1,102Updated this week
• mandiant / flare-floss
  FLARE Obfuscated String Solver - Automatically extract obfuscated strings from malware.
  ☆3,853Updated last week
• Neo23x0 / Loki
  Loki - Simple IOC and YARA Scanner
  ☆3,712Updated 3 weeks ago
• Neo23x0 / yarGen
  yarGen is a generator for YARA rules
  ☆1,774Updated 3 weeks ago
• sleuthkit / sleuthkit
  The Sleuth Kit® (TSK) is a library and collection of command line digital forensics tools that allow you to investigate volume and file s…
  ☆2,971Updated last week
• VirusTotal / yara-python
  The Python interface for YARA
  ☆727Updated 8 months ago
• cuckoosandbox / cuckoo
  Cuckoo Sandbox is an automated dynamic malware analysis system
  ☆5,904Updated 3 years ago
• certsocietegenerale / fame
  FAME Automates Malware Evaluation
  ☆925Updated last month
• lmco / laikaboss
  Laika BOSS: Object Scanning System
  ☆749Updated last year
• crits / crits
  CRITs - Collaborative Research Into Threats
  ☆909Updated 6 years ago
• tklengyel / drakvuf
  DRAKVUF Black-box Binary Analysis
  ☆1,204Updated this week
• Yara-Rules / rules
  Repository of yara rules
  ☆4,688Updated last year
• hatching / vmcloak
  Automated Virtual Machine Generation and Cloaking for Cuckoo Sandbox.
  ☆518Updated last year
• guelfoweb / peframe
  PEframe is a open source tool to perform static analysis on Portable Executable malware and malicious MS Office documents.
  ☆619Updated 3 years ago
• aptnotes / data
  APTnotes data
  ☆1,770Updated last year
• KasperskyLab / klara
  Kaspersky's GReAT KLara
  ☆730Updated last year
• omriher / CapTipper
  Malicious HTTP traffic explorer
  ☆724Updated 2 years ago
• Neo23x0 / signature-base
  YARA signature and IOC database for my scanners and tools
  ☆2,858Updated this week