microsoft / avmlLinks
AVML - Acquire Volatile Memory for Linux
☆1,049Updated this week
Alternatives and similar repositories for avml
Users that are interested in avml are comparing it to the libraries listed below
Sorting:
- A Fast (and safe) parser for the Windows XML Event Log (EVTX) format☆875Updated last month
- Standard collection of rules for capa: the tool for enumerating the capabilities of programs☆683Updated last week
- A rewrite of YARA in Rust.☆1,025Updated this week
- The multi-platform memory acquisition tool.☆940Updated 3 months ago
- RegRipper3.0☆681Updated last year
- ReversingLabs YARA Rules☆891Updated 3 months ago
- Dissect is a digital forensics & incident response framework and toolset that allows you to quickly access and analyse forensic artefacts…☆1,061Updated 2 months ago
- DRAKVUF Sandbox - automated hypervisor-level malware analysis system☆1,262Updated 3 weeks ago
- Repository of YARA rules made by Trellix ATR Team☆625Updated 10 months ago
- yarGen is a generator for YARA rules☆1,774Updated 3 weeks ago
- Distributed malware processing framework based on Python, Redis and S3.☆461Updated 2 months ago
- Digital Forensics artifact repository☆1,195Updated this week
- Sophos-originated indicators-of-compromise from published reports☆649Updated 3 weeks ago
- UAC is a powerful and extensible incident response tool designed for forensic investigators, security analysts, and IT professionals. It …☆1,235Updated this week
- Sysmon for Linux☆2,055Updated last week
- Indicators of Compromises (IOC) of our various investigations☆1,915Updated last week
- MBC content in markdown☆520Updated 7 months ago
- Cuckoo3 is a Python 3 open source automated malware analysis system.☆797Updated last month
- Super timeline all the things☆2,009Updated 2 weeks ago
- High Octane Triage Analysis☆806Updated this week
- This repository serves as a place for community created Targets and Modules for use with KAPE.☆811Updated last week
- RDP Bitmap Cache parser☆630Updated last year
- LiME (formerly DMD) is a Loadable Kernel Module (LKM), which allows the acquisition of volatile memory from Linux and Linux-based devices…☆1,929Updated 2 months ago
- Rapidly Search and Hunt through Windows Forensic Artefacts☆3,438Updated 3 months ago
- Fuzzy hashing API and fuzzy hashing tool☆773Updated 4 months ago
- A standalone SIGMA-based detection tool for EVTX, Auditd and Sysmon for Linux logs☆776Updated 2 weeks ago
- analyzeMFT.py is designed to fully parse the MFT file from an NTFS filesystem and present the results as accurately as possible in multip…☆520Updated 5 months ago
- Rekall Memory Forensic Framework☆1,993Updated 5 years ago
- A forensics tool to convert the data in the Windows srum (System Resource Usage Monitor) database to an xlsx spreadsheet.☆734Updated 8 months ago
- The Python interface for YARA☆727Updated 8 months ago