kevthehermit / VolUtility

Related projects: ⓘ

• JamesHabben / evolve
  Web interface for the Volatility Memory Forensics Framework
  ☆259Updated 6 years ago
• mkorman90 / VolatilityBot
  VolatilityBot – An automated memory analyzer for malware samples and memory dumps
  ☆263Updated 3 years ago
• 504ensicsLabs / DAMM
  Differential Analysis of Malware in Memory
  ☆209Updated 7 years ago
• SekoiaLab / Fastir_Collector
  ☆505Updated 3 years ago
• SupportIntelligence / Icewater
  16,432 Free Yara rules created by
  ☆378Updated 5 years ago
• 0x4D31 / deception-as-detection
  Deception based detection techniques mapped to the MITRE’s ATT&CK framework
  ☆280Updated 6 years ago
• mandiant / ShimCacheParser
  ☆271Updated last year
• Xen0ph0n / YaraGenerator
  Automatic Yara Rule Generation
  ☆328Updated 8 years ago
• H2Cyber / VolDiff
  VolDiff: Malware Memory Footprint Analysis based on Volatility
  ☆192Updated 7 years ago
• orlikoski / CDQR
  The Cold Disk Quick Response (CDQR) tool is a fast and easy to use forensic artifact parsing tool that works on disk images, mounted driv…
  ☆332Updated 2 years ago
• THIBER-ORG / userline
  Query and report user logons relations from MS Windows Security Events
  ☆240Updated 6 years ago
• Cyb3rWard0g / Invoke-ATTACKAPI
  A PowerShell script to interact with the MITRE ATT&CK Framework via its own API
  ☆364Updated 5 years ago
• mandiant / flare-wmi
  ☆415Updated last year
• mandiant / ioc_writer
  ☆200Updated last year
• orlikoski / Skadi
  Collect, Process, and Hunt with host based data from MacOS, Windows, and Linux
  ☆489Updated last year
• mandiant / iocs
  FireEye Publicly Shared Indicators of Compromise (IOCs)
  ☆462Updated 5 years ago
• davidpany / WMI_Forensics
  ☆293Updated 4 years ago
• JPCERTCC / aa-tools
  Artifact analysis tools by JPCERT/CC Analysis Center
  ☆451Updated 2 months ago
• fdiskyou / threat-INTel
  ☆237Updated this week
• SpiderLabs / malware-analysis
  A repository of tools and scripts related to malware analysis
  ☆242Updated 8 years ago
• certsocietegenerale / fame
  FAME Automates Malware Evaluation
  ☆845Updated 2 weeks ago
• volatilityfoundation / community
  Volatility plugins developed and maintained by the community
  ☆339Updated 3 years ago
• JohnLaTwC / PyPowerShellXray
  Python script to decode common encoded PowerShell scripts
  ☆214Updated 6 years ago
• krmaxwell / maltrieve
  A tool to retrieve malware directly from the source for security researchers.
  ☆562Updated 7 years ago
• OMENScan / AChoir
  Windows Live Artifacts Acquisition Script
  ☆181Updated 2 years ago
• keydet89 / RegRipper2.8
  ☆375Updated this week
• williballenthin / EVTXtract
  EVTXtract recovers and reconstructs fragments of EVTX log files from raw binary data, including unallocated space and memory images.
  ☆180Updated 4 years ago
• keithjjones / hostintel
  A modular Python application to collect intelligence for malicious hosts.
  ☆260Updated 3 years ago
• n0dec / MalwLess
  Test Blue Team detections without running any attack.
  ☆269Updated 4 months ago
• DefensePointSecurity / threat_note
  DPS' Lightweight Investigation Notebook
  ☆421Updated 8 months ago