Alternatives and similar repositories for lmg

Users that are interested in lmg are comparing it to the libraries listed below

• kevthehermit / VolUtility
  Web App for Volatility framework
  ☆382Updated 7 months ago
• mkorman90 / VolatilityBot
  VolatilityBot – An automated memory analyzer for malware samples and memory dumps
  ☆267Updated 4 years ago
• H2Cyber / VolDiff
  VolDiff: Malware Memory Footprint Analysis based on Volatility
  ☆194Updated 7 years ago
• 504ensicsLabs / DAMM
  Differential Analysis of Malware in Memory
  ☆212Updated 8 years ago
• orlikoski / CDQR
  The Cold Disk Quick Response (CDQR) tool is a fast and easy to use forensic artifact parsing tool that works on disk images, mounted driv…
  ☆338Updated 3 years ago
• mandiant / ShimCacheParser
  ☆277Updated 2 years ago
• log2timeline / dfvfs
  Digital Forensics Virtual File System (dfVFS)
  ☆209Updated 6 months ago
• MITRECND / chopshop
  Protocol Analysis/Decoder Framework
  ☆494Updated 2 years ago
• OMENScan / AChoir
  Windows Live Artifacts Acquisition Script
  ☆188Updated 3 years ago
• mandiant / ioc_writer
  ☆203Updated 2 years ago
• Xen0ph0n / YaraGenerator
  Automatic Yara Rule Generation
  ☆334Updated 9 years ago
• JamesHabben / evolve
  Web interface for the Volatility Memory Forensics Framework
  ☆259Updated 7 years ago
• EmersonElectricCo / fsf
  File Scanning Framework
  ☆293Updated 3 years ago
• quarkslab / irma
  IRMA is an asynchronous & customizable analysis system for suspicious files.
  ☆272Updated 2 years ago
• spender-sandbox / cuckoo-modified
  Modified edition of cuckoo
  ☆401Updated 7 years ago
• msuhanov / Linux-write-blocker
  The kernel patch and userspace tools to enable Linux software write blocking
  ☆142Updated 5 years ago
• williballenthin / EVTXtract
  EVTXtract recovers and reconstructs fragments of EVTX log files from raw binary data, including unallocated space and memory images.
  ☆195Updated 4 months ago
• SupportIntelligence / Icewater
  16,432 Free Yara rules created by
  ☆384Updated 6 years ago
• Neo23x0 / yarAnalyzer
  Yara Rule Analyzer and Statistics
  ☆375Updated 2 years ago
• CheckPointSW / Cuckoo-AWS
  Extension to Cuckoo Sandbox open source projects, adds support to AWS cloud functionalities and enables running emulation on auto-scaling…
  ☆136Updated 3 years ago
• MarkBaggett / MarkBaggett
  ☆192Updated last year
• volatilityfoundation / community
  Volatility plugins developed and maintained by the community
  ☆365Updated 4 years ago
• orlikoski / Skadi
  Collect, Process, and Hunt with host based data from MacOS, Windows, and Linux
  ☆499Updated 2 years ago
• Cisco-Talos / file2pcap
  ☆172Updated 4 years ago
• matonis / page_brute
  Page File analysis tools.
  ☆127Updated 9 years ago
• tomchop / volatility-autoruns
  Autoruns plugin for the Volatility framework
  ☆122Updated 5 years ago
• CrowdStrike / Forensics
  Scripts and code referenced in CrowdStrike blog posts
  ☆332Updated 5 years ago
• citizenlab / malware-signatures
  Yara rules for malware families seen as part of targeted threats project
  ☆138Updated 8 years ago
• 0x4D31 / deception-as-detection
  Deception based detection techniques mapped to the MITRE’s ATT&CK framework
  ☆289Updated 7 years ago
• dod-cyber-crime-center / DC3-MWCP
  DC3 Malware Configuration Parser (DC3-MWCP) is a framework for parsing configuration information from malware. The information extracted …
  ☆325Updated 5 months ago