Alternatives and similar repositories for defender-dump:

Users that are interested in defender-dump are comparing it to the libraries listed below

• NUKIB / maldump
  Multi-quarantine extractor
  ☆42Updated 3 months ago
• csababarta / memory-baseliner
  Memory Baseliner is a script that can compare two windows memory images or perform frequency of occurrence / data stacking analysis on mu…
  ☆50Updated last year
• harelsegev / INDXRipper
  Carve file metadata from NTFS index ($I30) attributes
  ☆62Updated 11 months ago
• gajos112 / Digital-Forensics
  ☆37Updated 3 years ago
• EZToolsManuals / EZToolsManuals
  A repo hosting the Markua content for the EZ Tools manuals hosted on Leanpub
  ☆64Updated last year
• JPCERTCC / jpcert-yara
  JPCERT/CC public YARA rules repository
  ☆106Updated last month
• Neo23x0 / YARA-Style-Guide
  A specification and style guide for YARA rules
  ☆43Updated 11 months ago
• AndrewRathbun / VanillaWindowsReference
  A repo that contains recursive directory listings (using PowerShell) of a vanilla (clean) install of every Windows OS version to compare …
  ☆150Updated last month
• NextronSystems / evtx-baseline
  A repository hosting example goodware evtx logs containing sample software installation and basic user interaction
  ☆73Updated last year
• EricZimmerman / Srum
  ☆39Updated this week
• ForensicArtifacts / artifacts-kb
  Digital Forensics Artifacts Knowledge Base
  ☆76Updated 8 months ago
• dfir-scripts / siftgrab
  ☆65Updated last month
• SentineLabs / SentinelLabs_RevCore_Tools
  The Windows Malware Analysis Reversing Core Tools
  ☆90Updated 4 years ago
• keydet89 / Events-Ripper
  Project based on RegRipper, to extract add'l value/pivot points from TLN events file
  ☆82Updated 2 months ago
• stuxnet999 / EventTranscriptParser
  Python based tool to extract forensic info from EventTranscript.db (Windows Diagnostic Data)
  ☆67Updated last year
• CyberCX-DFIR / usnjrnl_rewind
  USN Journal full path builder
  ☆51Updated 4 months ago
• EricZimmerman / RECmd
  Command line access to the Registry
  ☆134Updated this week
• invoke-eric / jupyter
  Jupyter Notebooks for Cyber Threat Intelligence
  ☆35Updated last year
• EricZimmerman / RBCmd
  Recycle bin artifact parser
  ☆40Updated this week
• elastic / labs-releases
  Elastic Security Labs releases
  ☆55Updated 2 months ago
• Neo23x0 / yaraQA
  YARA rule analyzer to improve rule quality and performance
  ☆95Updated 3 weeks ago
• hpthreatresearch / tools
  Scripts and tools accompanying HP Threat Research blog posts and reports.
  ☆50Updated 9 months ago
• Beercow / SEPparser
  Script for parsing Symantec Endpoint Protection logs, VBNs, and ccSubSDK database.
  ☆63Updated 2 years ago
• 100DaysofYARA / 2023
  Rules Shared by the Community from 100 Days of YARA 2023
  ☆77Updated last year
• blueteam0ps / memOptix
  A Jupyter notebook to assist with the analysis of the output generated from Volatility memory extraction framework.
  ☆94Updated last year
• The-DFIR-Report / Yara-Rules
  ☆63Updated last month
• CERT-Polska / training-mwdb
  MWDB exercises
  ☆19Updated 7 months ago
• EricZimmerman / RegistryPlugins
  ☆61Updated last week
• keydet89 / RegRipper4.0
  RegRipper4.0
  ☆41Updated last year
• JPCERTCC / Windows-Symbol-Tables
  Windows symbol tables for Volatility 3
  ☆78Updated 6 months ago