Alternatives and similar repositories for pyMFTGrabber:

Users that are interested in pyMFTGrabber are comparing it to the libraries listed below

• dnlongen / RegLister
  Recurse through a registry, identifying values with large data -- a registry malware hunter
  ☆44Updated 8 years ago
• grierforensics / officedissector
  Static analysis tools for Microsoft Office Open XML files and documents
  ☆68Updated 7 years ago
• darkquasar / WMI_Persistence
  A repo to hold some scripts pertaining WMI (Windows implementation of WBEM) forensics
  ☆85Updated 7 years ago
• mandiant / Volatility-Plugins
  ☆82Updated 8 years ago
• YahooArchive / PyIOCe
  Python IOC Editor
  ☆63Updated 9 years ago
• superponible / DFIR
  Various DFIR Tools
  ☆26Updated 6 years ago
• jipegit / IRNotes
  Some IR notes
  ☆73Updated 8 years ago
• devgc / EventMonkey
  A Windows Event Processing Utility
  ☆46Updated 6 years ago
• jjo-sec / volatility_plugins
  Volatility Plugins
  ☆21Updated 9 years ago
• jeffbryner / pyioc
  Python tools for IOC (Indicator of Compromise) handling
  ☆96Updated 3 years ago
• hiddenillusion / IR
  Some dfir stuff
  ☆31Updated 3 years ago
• Silv3rHorn / ArtifactExtractor
  Extract common Windows artifacts from source images and VSCs
  ☆66Updated 3 years ago
• kevthehermit / YaraPcap
  Process HTTP Pcaps With YARA
  ☆101Updated 11 years ago
• MinervaLabsResearch / Mystique
  Mystique may be used to discover infection markers that can be used to vaccinate endpoints against malware. It receives as input a malici…
  ☆81Updated 7 years ago
• idiom / pftriage
  Python tool and library to help analyze files during malware triage and analysis.
  ☆77Updated 4 years ago
• boolaz / BooLet
  Log Examination Tool
  ☆26Updated 8 years ago
• adamcrowdstrike / HybridAPI
  Quick tool for using Hybrid Analysis API on command line..
  ☆17Updated 7 years ago
• techbliss / Yara_Mailware_Quick_menu_scanner
  Work Fast With the pattern matching swiss knife for malware researchers.
  ☆36Updated 8 years ago
• cylance / GetNETGUIDs
  Extract GUIDs from .NET assemblies
  ☆21Updated 8 years ago
• yampelo / samparser
  A python script used to parse the SAM registry hive.
  ☆72Updated 6 years ago
• binarlyhq / binarly-query
  Command-line Interface for Binar.ly
  ☆37Updated 8 years ago
• DissectMalware / MalwareCMDMonitor
  Shows command lines used by latest instances analyzed on Hybrid-Analysis
  ☆43Updated 6 years ago
• JohnLaTwC / MacroJob
  Proof of concept VBA code to add to Normal.dot to put restrictions on Word
  ☆41Updated 8 years ago
• Neo23x0 / ImpHash-Generator
  PE Import Hash Generator
  ☆75Updated 7 years ago
• log2timeline / l2tbinaries
  Binaries for the log2timeline projects and dependencies
  ☆38Updated 4 months ago
• DBHeise / VM_Setup
  A collection of scripts to initialize a windows VM to run all the malwares!
  ☆105Updated 4 years ago