k1nd0ne / VolWeb
A centralized and enhanced memory analysis platform
☆434Updated last month
Alternatives and similar repositories for VolWeb:
Users that are interested in VolWeb are comparing it to the libraries listed below
- MemProcFS-Analyzer - Automated Forensic Analysis of Windows Memory Dumps for DFIR☆593Updated 2 weeks ago
- Handbook of windows forensic artifacts across multiple Windows version with interpretation tips and some examples. Work in progress!☆330Updated 7 months ago
- Incident Response collection and processing scripts with automated reporting scripts☆292Updated 9 months ago
- Awesome list of keywords and artifacts for Threat Hunting sessions☆553Updated 3 weeks ago
- CLI tools for forensic investigation of Windows artifacts☆328Updated 4 months ago
- Ransomware simulator written in Golang☆428Updated 2 years ago
- Collection of Linux and macOS Volatility3 Intermediate Symbol Files (ISF), suitable for memory analysis 🔍☆104Updated 3 weeks ago
- A standalone SIGMA-based detection tool for EVTX, Auditd and Sysmon for Linux logs☆704Updated last month
- Segugio allows the execution and tracking of critical steps in the malware detonation process, from clicking on the first stage to extrac…☆146Updated 6 months ago
- Automatically created C2 Feeds☆591Updated this week
- Rapidly Search and Hunt through Linux Forensics Artifacts☆188Updated last year
- Yet another Ransomware gang tracker☆401Updated last week
- Customizable Linux Persistence Tool for Security Research and Detection Engineering.☆590Updated 3 weeks ago
- Automated YARA Rule Standardization and Quality Assurance Tool☆200Updated this week
- A tool matrix for Russian APTs based on the Ransomware Tool Matrix☆202Updated 4 months ago
- A ProcessMonitor visualization application written in rust.☆177Updated last year
- 🏴☠️💰 Another Ransomware gang tracker☆185Updated this week
- EDRaser is a powerful tool for remotely deleting access logs, Windows event logs, databases, and other files on remote machines. It offer…☆353Updated 11 months ago
- Forensics Wiki, a wiki devoted to information about digital forensics (also known as computer forensics)☆269Updated 2 weeks ago
- An Archive of Ransomware Notes Past and Present Collected by Zscaler ThreatLabz☆347Updated last week
- The Volatility Collaborative GUI☆240Updated this week
- A comprehensive tool that provides an insightful analysis of Microsoft's monthly security updates.☆181Updated last week
- Simulate the behavior of AV/EDR for malware development training.☆516Updated last year
- This repository is a compilation of all APT simulations that target many vital sectors,both private and governmental. The simulation inc…☆612Updated this week
- An offensive data enrichment pipeline☆668Updated last month
- Advanced Bash script designed for conducting digital forensics on Linux systems☆141Updated 11 months ago
- ☆514Updated 5 months ago
- 🧭 The artifactcollector is a customizable agent to collect forensic artifacts on any Windows, macOS or Linux system☆281Updated last month
- Memory acquisition for Linux that makes sense.☆181Updated last year
- a tool to help operate in EDRs' blind spots☆722Updated 3 months ago