Alternatives and similar repositories for VolWeb:

Users that are interested in VolWeb are comparing it to the libraries listed below

• LETHAL-FORENSICS / MemProcFS-Analyzer
  MemProcFS-Analyzer - Automated Forensic Analysis of Windows Memory Dumps for DFIR
  ☆593Updated 2 weeks ago
• Psmths / windows-forensic-artifacts
  Handbook of windows forensic artifacts across multiple Windows version with interpretation tips and some examples. Work in progress!
  ☆330Updated 7 months ago
• WithSecureLabs / LinuxCatScale
  Incident Response collection and processing scripts with automated reporting scripts
  ☆292Updated 9 months ago
• mthcht / ThreatHunting-Keywords
  Awesome list of keywords and artifacts for Threat Hunting sessions
  ☆553Updated 3 weeks ago
• dfir-dd / dfir-toolkit
  CLI tools for forensic investigation of Windows artifacts
  ☆328Updated 4 months ago
• NextronSystems / ransomware-simulator
  Ransomware simulator written in Golang
  ☆428Updated 2 years ago
• Abyss-W4tcher / volatility3-symbols
  Collection of Linux and macOS Volatility3 Intermediate Symbol Files (ISF), suitable for memory analysis 🔍
  ☆104Updated 3 weeks ago
• wagga40 / Zircolite
  A standalone SIGMA-based detection tool for EVTX, Auditd and Sysmon for Linux logs
  ☆704Updated last month
• reecdeep / segugio
  Segugio allows the execution and tracking of critical steps in the malware detonation process, from clicking on the first stage to extrac…
  ☆146Updated 6 months ago
• drb-ra / C2IntelFeeds
  Automatically created C2 Feeds
  ☆591Updated this week
• M00NLIG7 / ChopChopGo
  Rapidly Search and Hunt through Linux Forensics Artifacts
  ☆188Updated last year
• RansomLook / RansomLook
  Yet another Ransomware gang tracker
  ☆401Updated last week
• Aegrah / PANIX
  Customizable Linux Persistence Tool for Security Research and Detection Engineering.
  ☆590Updated 3 weeks ago
• YARAHQ / yara-forge
  Automated YARA Rule Standardization and Quality Assurance Tool
  ☆200Updated this week
• BushidoUK / Russian-APT-Tool-Matrix
  A tool matrix for Russian APTs based on the Ransomware Tool Matrix
  ☆202Updated 4 months ago
• forensicxlab / VISION-ProcMon
  A ProcessMonitor visualization application written in rust.
  ☆177Updated last year
• JMousqueton / ransomware.live
  🏴‍☠️💰 Another Ransomware gang tracker
  ☆185Updated this week
• SafeBreach-Labs / EDRaser
  EDRaser is a powerful tool for remotely deleting access logs, Windows event logs, databases, and other files on remote machines. It offer…
  ☆353Updated 11 months ago
• forensicswiki / wiki
  Forensics Wiki, a wiki devoted to information about digital forensics (also known as computer forensics)
  ☆269Updated 2 weeks ago
• ThreatLabz / ransomware_notes
  An Archive of Ransomware Notes Past and Present Collected by Zscaler ThreatLabz
  ☆347Updated last week
• LDO-CERT / orochi
  The Volatility Collaborative GUI
  ☆240Updated this week
• xaitax / PatchaPalooza
  A comprehensive tool that provides an insightful analysis of Microsoft's monthly security updates.
  ☆181Updated last week
• Helixo32 / CrimsonEDR
  Simulate the behavior of AV/EDR for malware development training.
  ☆516Updated last year
• S3N4T0R-0X0 / APT-Attack-Simulation
  This repository is a compilation of all APT simulations that target many vital sectors,both private and governmental. The simulation inc…
  ☆612Updated this week
• SpecterOps / Nemesis
  An offensive data enrichment pipeline
  ☆668Updated last month
• vm32 / Digital-Forensics-Script-for-Linux
  Advanced Bash script designed for conducting digital forensics on Linux systems
  ☆141Updated 11 months ago
• executemalware / Malware-IOCs
  ☆514Updated 5 months ago
• forensicanalysis / artifactcollector
  🧭 The artifactcollector is a customizable agent to collect forensic artifacts on any Windows, macOS or Linux system
  ☆281Updated last month
• MagnetForensics / dumpit-linux
  Memory acquisition for Linux that makes sense.
  ☆181Updated last year
• naksyn / Pyramid
  a tool to help operate in EDRs' blind spots
  ☆722Updated 3 months ago