threadmap plugin for Volatility Foundation
☆27Aug 23, 2021Updated 4 years ago
Alternatives and similar repositories for threadmap
Users that are interested in threadmap are comparing it to the libraries listed below
Sorting:
- A Volatility plugin for finding sqlite database rows☆21Jul 14, 2019Updated 6 years ago
- Volatility plugins created by the author☆44Oct 2, 2015Updated 10 years ago
- Volatility Framework plugin to detect various types of hooks as performed by banking Trojans☆40Dec 14, 2018Updated 7 years ago
- RunPE dump - I wrote this to have better control over the analysis of malwares. I can stop and analysis malware when it uses some of the …☆10Jul 1, 2015Updated 10 years ago
- An advanced parser for INDX records☆29Aug 7, 2019Updated 6 years ago
- Telegram Bot that performs checks of the yararules.com ruleset☆13May 13, 2016Updated 9 years ago
- ☆16Apr 16, 2017Updated 8 years ago
- Compile time string XOR for visual studio 2010-2013☆10May 31, 2018Updated 7 years ago
- How can you track the hunting techniques you come up with?☆13Sep 3, 2017Updated 8 years ago
- Page File analysis tools.☆131Dec 3, 2015Updated 10 years ago
- Tool to parse SRU database☆25Mar 1, 2018Updated 8 years ago
- Various scrips☆12Oct 19, 2022Updated 3 years ago
- EVTXtract recovers and reconstructs fragments of EVTX log files from raw binary data, including unallocated space and memory images.☆209Mar 12, 2025Updated last year
- Python IOC Editor☆65Mar 10, 2015Updated 11 years ago
- ☆15Apr 9, 2018Updated 7 years ago
- ☆13Nov 10, 2020Updated 5 years ago
- ☆310Aug 14, 2020Updated 5 years ago
- Parses the WMI object database....looking for persistence☆34Dec 12, 2019Updated 6 years ago
- Easily create index of your SANS books☆18Oct 28, 2022Updated 3 years ago
- Pure Python parser for Application Compatibility Shim Databases (.sdb files)☆110Jan 26, 2021Updated 5 years ago
- ☆280Apr 6, 2023Updated 2 years ago
- MalRecon - Basic Malware Reconnaissance and Analysis Tool☆26Jun 8, 2017Updated 8 years ago
- Small and highly portable detection tests.☆12Oct 12, 2017Updated 8 years ago
- Hollowfind is a Volatility plugin to detect different types of process hollowing techniques used in the wild to bypass, confuse, deflect …☆142Sep 29, 2022Updated 3 years ago
- Python script to automatically create sigma rules from The hive observables☆25Mar 17, 2019Updated 7 years ago
- Shellcode injection using debugging APIs☆19Jan 13, 2014Updated 12 years ago
- A nodejs web application honeypot☆47Aug 23, 2015Updated 10 years ago
- ☆12May 8, 2020Updated 5 years ago
- ☆19Oct 27, 2018Updated 7 years ago
- CSMTP allow you to send email via command line and save message in sent folder☆12Jan 21, 2018Updated 8 years ago
- Mystique may be used to discover infection markers that can be used to vaccinate endpoints against malware. It receives as input a malici…☆82Sep 26, 2017Updated 8 years ago
- Jenkins plugin for AWS CodeDeploy☆15Oct 18, 2023Updated 2 years ago
- Volatility plugin to search for all Autostart Extensibility Points (AESPs)☆10May 16, 2024Updated last year
- Carve NTFS USN records from binary data☆27May 21, 2017Updated 8 years ago
- Another Portable Executable files analysing stuff☆21May 28, 2011Updated 14 years ago
- Merge all Yara rules from official Yara github repository in one .yar file☆31Jun 22, 2018Updated 7 years ago
- The plugin is an integration of Virus Battle API to the well known IDA Disassembler.☆20May 26, 2015Updated 10 years ago
- Automated forensics written in PowerShell☆34Sep 29, 2019Updated 6 years ago
- Examples for detection of hidden processes on windows☆35Jun 11, 2014Updated 11 years ago