microsoft / avmlLinks
AVML - Acquire Volatile Memory for Linux
☆1,005Updated last week
Alternatives and similar repositories for avml
Users that are interested in avml are comparing it to the libraries listed below
Sorting:
- A Fast (and safe) parser for the Windows XML Event Log (EVTX) format☆815Updated last week
- A rewrite of YARA in Rust.☆906Updated this week
- Standard collection of rules for capa: the tool for enumerating the capabilities of programs☆641Updated last week
- The multi-platform memory acquisition tool.☆866Updated 2 weeks ago
- ReversingLabs YARA Rules☆867Updated 2 weeks ago
- DRAKVUF Sandbox - automated hypervisor-level malware analysis system☆1,215Updated this week
- Dissect is a digital forensics & incident response framework and toolset that allows you to quickly access and analyse forensic artefacts…☆1,045Updated 3 weeks ago
- RegRipper3.0☆652Updated 10 months ago
- Digital Forensics artifact repository☆1,170Updated 2 weeks ago
- Indicators of Compromises (IOC) of our various investigations☆1,870Updated last week
- UAC is a powerful and extensible incident response tool designed for forensic investigators, security analysts, and IT professionals. It …☆1,157Updated 3 weeks ago
- Repository of YARA rules made by Trellix ATR Team☆614Updated 7 months ago
- Distributed malware processing framework based on Python, Redis and S3.☆443Updated 3 weeks ago
- Super timeline all the things☆1,945Updated last week
- Sophos-originated indicators-of-compromise from published reports☆633Updated 2 months ago
- Digital Forensics Investigation Platform☆854Updated last year
- High Octane Triage Analysis☆778Updated this week
- yarGen is a generator for YARA rules☆1,728Updated 3 weeks ago
- analyzeMFT.py is designed to fully parse the MFT file from an NTFS filesystem and present the results as accurately as possible in multip…☆505Updated 2 months ago
- Sysmon for Linux☆1,987Updated 3 months ago
- Cuckoo3 is a Python 3 open source automated malware analysis system.☆773Updated 4 months ago
- Forensics artefact collection tool for systems running Microsoft Windows☆425Updated 7 months ago
- RDP Bitmap Cache parser☆576Updated 9 months ago
- This repository serves as a place for community created Targets and Modules for use with KAPE.☆773Updated this week
- Malware repository component for samples & static configuration with REST API interface.☆368Updated last week
- AssemblyLine 4: File triage and malware analysis☆383Updated this week
- Signatures and IoCs from public Volexity blog posts.☆359Updated 3 weeks ago
- LiME (formerly DMD) is a Loadable Kernel Module (LKM), which allows the acquisition of volatile memory from Linux and Linux-based devices…☆1,885Updated 2 months ago
- Analysis of malware and Cyber Threat Intel of APT and cybercriminals groups☆717Updated 2 years ago
- Everything related to Linux Forensics☆709Updated 2 years ago