Alternatives and similar repositories for VolUtility:

Users that are interested in VolUtility are comparing it to the libraries listed below

• JamesHabben / evolve
  Web interface for the Volatility Memory Forensics Framework
  ☆260Updated 7 years ago
• mkorman90 / VolatilityBot
  VolatilityBot – An automated memory analyzer for malware samples and memory dumps
  ☆264Updated 3 years ago
• 504ensicsLabs / DAMM
  Differential Analysis of Malware in Memory
  ☆212Updated 7 years ago
• SekoiaLab / Fastir_Collector
  ☆507Updated 3 years ago
• H2Cyber / VolDiff
  VolDiff: Malware Memory Footprint Analysis based on Volatility
  ☆195Updated 7 years ago
• 0x4D31 / deception-as-detection
  Deception based detection techniques mapped to the MITRE’s ATT&CK framework
  ☆288Updated 7 years ago
• SupportIntelligence / Icewater
  16,432 Free Yara rules created by
  ☆382Updated 5 years ago
• Xen0ph0n / YaraGenerator
  Automatic Yara Rule Generation
  ☆331Updated 8 years ago
• mandiant / ShimCacheParser
  ☆274Updated last year
• THIBER-ORG / userline
  Query and report user logons relations from MS Windows Security Events
  ☆241Updated 6 years ago
• orlikoski / CDQR
  The Cold Disk Quick Response (CDQR) tool is a fast and easy to use forensic artifact parsing tool that works on disk images, mounted driv…
  ☆334Updated 2 years ago
• krmaxwell / maltrieve
  A tool to retrieve malware directly from the source for security researchers.
  ☆562Updated 7 years ago
• davidpany / WMI_Forensics
  ☆296Updated 4 years ago
• mandiant / flare-wmi
  ☆419Updated last year
• JohnLaTwC / PyPowerShellXray
  Python script to decode common encoded PowerShell scripts
  ☆215Updated 6 years ago
• MITRECND / chopshop
  Protocol Analysis/Decoder Framework
  ☆490Updated 2 years ago
• mitre / multiscanner
  Modular file scanning/analysis framework
  ☆619Updated 5 years ago
• orlikoski / Skadi
  Collect, Process, and Hunt with host based data from MacOS, Windows, and Linux
  ☆497Updated 2 years ago
• phage-nz / ph0neutria
  ph0neutria is a malware zoo builder that sources samples straight from the wild. Everything is stored in Viper for ease of access and man…
  ☆300Updated 4 years ago
• OMENScan / AChoir
  Windows Live Artifacts Acquisition Script
  ☆185Updated 2 years ago
• mandiant / ioc_writer
  ☆201Updated last year
• williballenthin / EVTXtract
  EVTXtract recovers and reconstructs fragments of EVTX log files from raw binary data, including unallocated space and memory images.
  ☆193Updated 4 years ago
• egaus / MaliciousMacroBot
  ☆150Updated 6 years ago
• SpiderLabs / malware-analysis
  A repository of tools and scripts related to malware analysis
  ☆246Updated 8 years ago
• PUNCH-Cyber / stoq
  An open source framework for enterprise level automated analysis.
  ☆395Updated 2 years ago
• JPCERTCC / aa-tools
  Artifact analysis tools by JPCERT/CC Analysis Center
  ☆456Updated 6 months ago
• Cyb3rWard0g / Invoke-ATTACKAPI
  A PowerShell script to interact with the MITRE ATT&CK Framework via its own API
  ☆366Updated 5 years ago
• DefensePointSecurity / threat_note
  DPS' Lightweight Investigation Notebook
  ☆426Updated last year