Alternatives and similar repositories for VolUtility

Users that are interested in VolUtility are comparing it to the libraries listed below

• mkorman90 / VolatilityBot
  VolatilityBot – An automated memory analyzer for malware samples and memory dumps
  ☆270Updated 4 years ago
• JamesHabben / evolve
  Web interface for the Volatility Memory Forensics Framework
  ☆259Updated 7 years ago
• 504ensicsLabs / DAMM
  Differential Analysis of Malware in Memory
  ☆212Updated 8 years ago
• SupportIntelligence / Icewater
  16,432 Free Yara rules created by
  ☆387Updated 6 years ago
• H2Cyber / VolDiff
  VolDiff: Malware Memory Footprint Analysis based on Volatility
  ☆194Updated 8 years ago
• SekoiaLab / Fastir_Collector
  ☆518Updated 4 years ago
• mandiant / ShimCacheParser
  ☆278Updated 2 years ago
• MITRECND / chopshop
  Protocol Analysis/Decoder Framework
  ☆494Updated 2 years ago
• Xen0ph0n / YaraGenerator
  Automatic Yara Rule Generation
  ☆335Updated 9 years ago
• halpomeranz / lmg
  Script for automating Linux memory capture and analysis
  ☆272Updated 5 years ago
• mandiant / ioc_writer
  ☆205Updated 2 years ago
• krmaxwell / maltrieve
  A tool to retrieve malware directly from the source for security researchers.
  ☆563Updated 8 years ago
• 0x4D31 / deception-as-detection
  Deception based detection techniques mapped to the MITRE’s ATT&CK framework
  ☆289Updated 7 years ago
• THIBER-ORG / userline
  Query and report user logons relations from MS Windows Security Events
  ☆243Updated 7 years ago
• OMENScan / AChoir
  Windows Live Artifacts Acquisition Script
  ☆189Updated 3 years ago
• buguroo / cuckooautoinstall
  Auto Installer Script for Cuckoo Sandbox
  ☆164Updated 7 years ago
• JohnLaTwC / PyPowerShellXray
  Python script to decode common encoded PowerShell scripts
  ☆216Updated 7 years ago
• mandiant / iocs
  FireEye Publicly Shared Indicators of Compromise (IOCs)
  ☆469Updated 6 years ago
• tomchop / volatility-autoruns
  Autoruns plugin for the Volatility framework
  ☆122Updated 6 years ago
• orlikoski / CDQR
  The Cold Disk Quick Response (CDQR) tool is a fast and easy to use forensic artifact parsing tool that works on disk images, mounted driv…
  ☆340Updated 3 years ago
• egaus / MaliciousMacroBot
  ☆152Updated 6 years ago
• phage-nz / ph0neutria
  ph0neutria is a malware zoo builder that sources samples straight from the wild. Everything is stored in Viper for ease of access and man…
  ☆301Updated 5 years ago
• orlikoski / Skadi
  Collect, Process, and Hunt with host based data from MacOS, Windows, and Linux
  ☆502Updated 2 years ago
• SpiderLabs / malware-analysis
  A repository of tools and scripts related to malware analysis
  ☆252Updated 9 years ago
• mandiant / flare-wmi
  ☆428Updated 2 years ago
• PUNCH-Cyber / stoq
  An open source framework for enterprise level automated analysis.
  ☆395Updated 3 years ago
• crits / crits_services
  CRITs Services Collection
  ☆184Updated 4 years ago
• Neo23x0 / yarAnalyzer
  Yara Rule Analyzer and Statistics
  ☆384Updated 2 years ago
• aplura / Tango
  Honeypot Intelligence with Splunk
  ☆255Updated 6 years ago
• williballenthin / EVTXtract
  EVTXtract recovers and reconstructs fragments of EVTX log files from raw binary data, including unallocated space and memory images.
  ☆197Updated 6 months ago