Alternatives and similar repositories for avml:

Users that are interested in avml are comparing it to the libraries listed below

• omerbenamram / evtx
  A Fast (and safe) parser for the Windows XML Event Log (EVTX) format
  ☆717Updated 3 months ago
• Velocidex / WinPmem
  The multi-platform memory acquisition tool.
  ☆738Updated 2 months ago
• mandiant / capa-rules
  Standard collection of rules for capa: the tool for enumerating the capabilities of programs
  ☆566Updated last week
• reversinglabs / reversinglabs-yara-rules
  ReversingLabs YARA Rules
  ☆791Updated 3 weeks ago
• keydet89 / RegRipper3.0
  RegRipper3.0
  ☆576Updated 2 months ago
• ForensicArtifacts / artifacts
  Digital Forensics artifact repository
  ☆1,086Updated last month
• CERT-Polska / karton
  Distributed malware processing framework based on Python, Redis and S3.
  ☆401Updated 3 weeks ago
• VirusTotal / yara-x
  A rewrite of YARA in Rust.
  ☆710Updated this week
• tclahr / uac
  UAC is a powerful and extensible incident response tool designed for forensic investigators, security analysts, and IT professionals. It …
  ☆863Updated this week
• binref / refinery
  High Octane Triage Analysis
  ☆709Updated this week
• advanced-threat-research / Yara-Rules
  Repository of YARA rules made by Trellix ATR Team
  ☆576Updated last year
• Neo23x0 / yarGen
  yarGen is a generator for YARA rules
  ☆1,600Updated 8 months ago
• eset / malware-ioc
  Indicators of Compromises (IOC) of our various investigations
  ☆1,724Updated 3 weeks ago
• StrangerealIntel / CyberThreatIntel
  Analysis of malware and Cyber Threat Intel of APT and cybercriminals groups
  ☆707Updated 2 years ago
• volatilityfoundation / community
  Volatility plugins developed and maintained by the community
  ☆354Updated 3 years ago
• CERT-Polska / drakvuf-sandbox
  DRAKVUF Sandbox - automated hypervisor-level malware analysis system
  ☆1,095Updated 2 months ago
• evild3ad / MemProcFS-Analyzer
  MemProcFS-Analyzer - Automated Forensic Analysis of Windows Memory Dumps for DFIR
  ☆584Updated 2 months ago
• sophoslabs / IoCs
  Sophos-originated indicators-of-compromise from published reports
  ☆564Updated last week
• microsoft / SysinternalsEBPF
  The Linux port of the Sysinternals Sysmon tool.
  ☆254Updated 2 weeks ago
• microsoft / SysmonForLinux
  Sysmon for Linux
  ☆1,810Updated last week
• rowingdude / analyzeMFT
  analyzeMFT.py is designed to fully parse the MFT file from an NTFS filesystem and present the results as accurately as possible in multip…
  ☆460Updated 4 months ago
• MarkBaggett / srum-dump
  A forensics tool to convert the data in the Windows srum (System Resource Usage Monitor) database to an xlsx spreadsheet.
  ☆602Updated 3 months ago
• Rurik / Noriben
  Noriben - Portable, Simple, Malware Analysis Sandbox
  ☆1,139Updated last year
• google / rekall
  Rekall Memory Forensic Framework
  ☆1,938Updated 4 years ago
• MBCProject / mbc-markdown
  MBC content in markdown
  ☆405Updated last month
• VirusTotal / yara-python
  The Python interface for YARA
  ☆678Updated 2 months ago
• EricZimmerman / KapeFiles
  This repository serves as a place for community created Targets and Modules for use with KAPE.
  ☆678Updated this week
• target / strelka
  Real-time, container-based file scanning at enterprise scale
  ☆902Updated last month
• InQuest / yara-rules
  A collection of YARA rules we wish to share with the world, most probably referenced from http://blog.inquest.net.
  ☆370Updated 2 years ago
• mkorman90 / regipy
  Regipy is an os independent python library for parsing offline registry hives
  ☆251Updated 2 months ago