Alternatives and similar repositories for volatility_symbols:

Users that are interested in volatility_symbols are comparing it to the libraries listed below

• airbus-cert / yara-ttd
  Use YARA rules on Time Travel Debugging traces
  ☆89Updated last year
• vobst / btf2json
  Generate Volatility3 profiles from BTF.
  ☆19Updated 4 months ago
• JPCERTCC / Windows-Symbol-Tables
  Windows symbol tables for Volatility 3
  ☆83Updated 9 months ago
• 0x534a / dynmx
  Signature-based detection of malware features based on Windows API call sequences. It's like YARA for sandbox API traces!
  ☆82Updated last year
• airbus-cert / minusone
  Powershell Linter
  ☆50Updated 3 weeks ago
• elastic / die-python
  Native Python3 bindings for @horsicq's Detect-It-Easy
  ☆64Updated last month
• volexity / GoResolver
  GoResolver is a Go analysis tool using both Go symbol extraction and Control Flow Graph (CFG) similarity to identify and resolve the func…
  ☆41Updated last week
• Immersive-Labs-Sec / volatility_plugins
  Volatility 3 Plugins
  ☆19Updated 2 years ago
• eset / nimfilt
  A collection of modules and scripts to help with analyzing Nim binaries
  ☆72Updated 6 months ago
• Velocidex / Linpmem
  Linpmem is a linux memory acquisition tool
  ☆82Updated 11 months ago
• g-les / 100DaysofYARA
  100 Days of YARA to be updated with rules & ideas as the year progresses
  ☆60Updated 2 years ago
• sk4la / volatility3-docker
  Volatility, on Docker 🐳
  ☆34Updated 2 weeks ago
• jk45054 / CTF-writeups
  Writeups for CTF challenges
  ☆31Updated last year
• WithSecureLabs / GarbageMan
  GarbageMan is a set of tools for analyzing .NET binaries through heap analysis.
  ☆114Updated 2 years ago
• ald3ns / copy-as-yara
  This is a little plugin to copy disassembly in a way that is usable in YARA rules!
  ☆44Updated last week
• N0fix / rustbininfo
  Get information about stripped rust executables
  ☆29Updated last week
• fr0gger / MalwareMuncher
  Malware Muncher is a proof-of-concept Python script that utilizes the Frida framework for binary instrumentation and API hooking, enablin…
  ☆44Updated 2 years ago
• GDATAAdvancedAnalytics / winreg-tasks
  ☆18Updated 2 years ago
• danielplohmann / mcrit
  The MinHash-based Code Relationship & Investigation Toolkit (MCRIT) is a framework created to simplify the application of the MinHash alg…
  ☆91Updated last month
• Abyss-W4tcher / volatility2-profiles
  Collection of Volatility2 profiles, generated against Linux kernels.
  ☆38Updated 3 weeks ago
• intel471 / coderex
  A tool that automates regex generation for the x86 and x86-64 instruction sets
  ☆70Updated last year
• Abyss-W4tcher / volatility-scripts
  This repository contains a variety of plugins and scripts, related to the Volatility framework.
  ☆12Updated 2 months ago
• ernw / quarantine-formats
  Documentation and parsers for different anti-virus quarantine formats.
  ☆42Updated 4 years ago
• OALabs / flare-vm
  ☆14Updated 2 years ago
• Squiblydoo / MalAPIReader
  Reads and prints information from the website MalAPI.io
  ☆19Updated 2 years ago
• leandrofroes / malware-research
  General malware analysis stuff
  ☆36Updated 7 months ago
• sisoma2 / malware_analysis
  Scripts, Yara rules and other files developed during malware investigations
  ☆25Updated 2 years ago
• airbus-cert / vbSparkle
  VBScript & VBA source-to-source deobfuscator with partial-evaluation
  ☆76Updated 8 months ago
• thewhiteninja / deobshell
  Powershell script deobfuscation using AST in Python
  ☆65Updated last year
• KasperskyLab / Apihashes
  IDA Pro plugin for recognizing known hashes of API function names
  ☆81Updated 2 years ago