Alternatives and similar repositories for rekall:

Users that are interested in rekall are comparing it to the libraries listed below

• viper-framework / viper
  Binary analysis and management framework
  ☆1,544Updated last year
• 504ensicsLabs / LiME
  LiME (formerly DMD) is a Loadable Kernel Module (LKM), which allows the acquisition of volatile memory from Linux and Linux-based devices…
  ☆1,777Updated 4 months ago
• Cisco-Talos / pyrebox
  Python scriptable Reverse Engineering Sandbox, a Virtual Machine instrumentation and inspection framework based on QEMU
  ☆1,662Updated last year
• mandiant / flare-fakenet-ng
  FakeNet-NG - Next Generation Dynamic Network Analysis Tool
  ☆1,854Updated last month
• Rurik / Noriben
  Noriben - Portable, Simple, Malware Analysis Sandbox
  ☆1,139Updated last year
• mandiant / flare-floss
  FLARE Obfuscated String Solver - Automatically extract obfuscated strings from malware.
  ☆3,412Updated this week
• log2timeline / plaso
  Super timeline all the things
  ☆1,784Updated last month
• volatilityfoundation / volatility
  An advanced memory forensics framework
  ☆7,528Updated last year
• vivisect / vivisect
  ☆956Updated 2 weeks ago
• JusticeRage / Manalyze
  A static analyzer for PE executables.
  ☆1,043Updated last year
• VirusTotal / yara-python
  The Python interface for YARA
  ☆677Updated 2 months ago
• GoSecure / malboxes
  Builds malware analysis Windows VMs so that you don't have to.
  ☆1,041Updated 3 years ago
• panda-re / panda
  Platform for Architecture-Neutral Dynamic Analysis
  ☆2,548Updated this week
• joxeankoret / pyew
  Official repository for Pyew.
  ☆388Updated 5 years ago
• tklengyel / drakvuf
  DRAKVUF Black-box Binary Analysis
  ☆1,093Updated this week
• Neo23x0 / yarGen
  yarGen is a generator for YARA rules
  ☆1,602Updated 8 months ago
• Yara-Rules / rules
  Repository of yara rules
  ☆4,287Updated 10 months ago
• sleuthkit / sleuthkit
  The Sleuth Kit® (TSK) is a library and collection of command line digital forensics tools that allow you to investigate volume and file s…
  ☆2,719Updated this week
• tomchop / malcom
  Malcom - Malware Communications Analyzer
  ☆1,159Updated 7 years ago
• google / grr
  GRR Rapid Response: remote live forensics for incident response
  ☆4,842Updated this week
• buffer / thug
  Python low-interaction honeyclient
  ☆1,004Updated this week
• certsocietegenerale / fame
  FAME Automates Malware Evaluation
  ☆878Updated last week
• googleprojectzero / sandbox-attacksurface-analysis-tools
  Set of tools to analyze Windows sandboxes for exposed attack surface.
  ☆2,114Updated 2 months ago
• volatilityfoundation / community
  Volatility plugins developed and maintained by the community
  ☆354Updated 3 years ago
• erocarrera / pefile
  pefile is a Python module to read and work with PE (Portable Executable) files
  ☆1,910Updated 5 months ago
• microsoft / avml
  AVML - Acquire Volatile Memory for Linux
  ☆908Updated this week
• guelfoweb / peframe
  PEframe is a open source tool to perform static analysis on Portable Executable malware and malicious MS Office documents.
  ☆614Updated 2 years ago
• endgameinc / xori
  Xori is an automation-ready disassembly and static analysis library for PE32, 32+ and shellcode
  ☆726Updated 2 years ago
• crits / crits
  CRITs - Collaborative Research Into Threats
  ☆897Updated 5 years ago
• ForensicArtifacts / artifacts
  Digital Forensics artifact repository
  ☆1,089Updated last month