Alternatives and similar repositories for rekall-profiles

Users that are interested in rekall-profiles are comparing it to the libraries listed below

• codexgigassys / codex-backend
  Codex Gigas malware DNA profiling search engine discovers malware patterns and characteristics assisting individuals who are attracted in…
  ☆155Updated 5 years ago
• mak / ekdeco
  Scripts for dealing with various ek's
  ☆69Updated 8 years ago
• H2Cyber / VolDiff
  VolDiff: Malware Memory Footprint Analysis based on Volatility
  ☆194Updated 8 years ago
• KoreLogicSecurity / mastiff
  Malware static analysis framework
  ☆179Updated 5 years ago
• wmetcalf / buildcuckoo-trusty
  A dumb set of scripts for building a cuckoo rig
  ☆61Updated 8 years ago
• sroberts / malwarehouse
  A warehouse for your malware
  ☆133Updated 12 years ago
• MITRECND / yaraprocessor
  Yara is awesome, but sometimes you need to manipulate the data streams you're scanning in different ways.
  ☆97Updated 10 years ago
• AlienVault-OTX / yabin
  A Yara rule generator for finding related samples and hunting
  ☆159Updated 3 years ago
• scudette / memory-analysis
  A Rekall interactive document for a Memory Analysis workshop/course.
  ☆43Updated 8 years ago
• kslgroup / threadmap
  threadmap plugin for Volatility Foundation
  ☆27Updated 4 years ago
• rjhansen / nsrllookup
  Checks with NSRL RDS servers looking for for hash matches
  ☆114Updated 4 years ago
• 504ensicsLabs / DAMM
  Differential Analysis of Malware in Memory
  ☆212Updated 8 years ago
• spender-sandbox / community-modified
  Modified edition of cuckoo community modules
  ☆50Updated 8 years ago
• citizenlab / malware-signatures
  Yara rules for malware families seen as part of targeted threats project
  ☆141Updated 8 years ago
• jeffbryner / pyioc
  Python tools for IOC (Indicator of Compromise) handling
  ☆96Updated 3 years ago
• Cisco-Talos / BASS
  BASS - BASS Automated Signature Synthesizer
  ☆178Updated 7 years ago
• Tigzy / malware-repo
  Malware Repository Framework
  ☆99Updated 7 years ago
• CrowdStrike / CrowdFMS
  CrowdStrike Feed Management System. CrowdFMS is a framework for automating collection and processing of samples from VirusTotal, by lever…
  ☆128Updated 6 years ago
• MinervaLabsResearch / Mystique
  Mystique may be used to discover infection markers that can be used to vaccinate endpoints against malware. It receives as input a malici…
  ☆82Updated 8 years ago
• tylabs / qs_old
  Command line tool for scanning streams within office documents plus xor db attack
  ☆126Updated 2 years ago
• TakahiroHaruyama / openioc_scan
  openioc_scan Volatility Framework plugin
  ☆43Updated 9 years ago
• vortessence / vortessence
  Automated memory forensics analysis
  ☆33Updated 6 years ago
• mandiant / Volatility-Plugins
  ☆82Updated 9 years ago
• jipegit / IRNotes
  Some IR notes
  ☆73Updated 9 years ago
• adamkramer / rapid_env
  Rapid deployment of Windows environment (files, registry keys, mutex etc) to facilitate malware analysis
  ☆42Updated 10 years ago
• DBHeise / VM_Setup
  A collection of scripts to initialize a windows VM to run all the malwares!
  ☆106Updated 5 years ago
• kevthehermit / YaraRules
  My Yara Rules Collection
  ☆53Updated 9 years ago
• ANSSI-FR / bootcode_parser
  A boot record parser that identifies known good signatures for MBR, VBR and IPL.
  ☆98Updated 7 months ago
• kd8bny / LiMEaide
  A python application designed to remotely dump RAM of a Linux client and create a volatility profile for later analysis on your local hos…
  ☆161Updated 5 years ago
• vmware-archive / tic
  Bit9 + Carbon Black Threat Intelligence
  ☆81Updated 9 years ago