microsoft / avmlLinks
AVML - Acquire Volatile Memory for Linux
☆998Updated this week
Alternatives and similar repositories for avml
Users that are interested in avml are comparing it to the libraries listed below
Sorting:
- A Fast (and safe) parser for the Windows XML Event Log (EVTX) format☆802Updated last month
- Standard collection of rules for capa: the tool for enumerating the capabilities of programs☆634Updated 2 weeks ago
- The multi-platform memory acquisition tool.☆849Updated 3 months ago
- A rewrite of YARA in Rust.☆890Updated this week
- RegRipper3.0☆642Updated 9 months ago
- ReversingLabs YARA Rules☆858Updated 2 weeks ago
- Dissect is a digital forensics & incident response framework and toolset that allows you to quickly access and analyse forensic artefacts…☆1,041Updated 2 weeks ago
- Digital Forensics artifact repository☆1,163Updated 3 weeks ago
- DRAKVUF Sandbox - automated hypervisor-level malware analysis system☆1,206Updated last week
- UAC is a powerful and extensible incident response tool designed for forensic investigators, security analysts, and IT professionals. It …☆1,146Updated this week
- Distributed malware processing framework based on Python, Redis and S3.☆441Updated this week
- yarGen is a generator for YARA rules☆1,719Updated 6 months ago
- Repository of YARA rules made by Trellix ATR Team☆611Updated 6 months ago
- Indicators of Compromises (IOC) of our various investigations☆1,857Updated last week
- Sysmon for Linux☆1,965Updated 3 months ago
- RDP Bitmap Cache parser☆570Updated 8 months ago
- This repository serves as a place for community created Targets and Modules for use with KAPE.☆766Updated last week
- High Octane Triage Analysis☆773Updated last week
- analyzeMFT.py is designed to fully parse the MFT file from an NTFS filesystem and present the results as accurately as possible in multip…☆500Updated last month
- Super timeline all the things☆1,938Updated 3 weeks ago
- A forensics tool to convert the data in the Windows srum (System Resource Usage Monitor) database to an xlsx spreadsheet.☆717Updated 4 months ago
- MBC content in markdown☆481Updated 4 months ago
- Sophos-originated indicators-of-compromise from published reports☆631Updated 2 months ago
- The Python interface for YARA☆710Updated 4 months ago
- AssemblyLine 4: File triage and malware analysis☆372Updated this week
- Forensics artefact collection tool for systems running Microsoft Windows☆424Updated 6 months ago
- Fuzzy hashing API and fuzzy hashing tool☆749Updated 3 weeks ago
- YARA signature and IOC database for my scanners and tools☆2,758Updated last week
- LiME (formerly DMD) is a Loadable Kernel Module (LKM), which allows the acquisition of volatile memory from Linux and Linux-based devices…☆1,874Updated last month
- Malware repository component for samples & static configuration with REST API interface.☆366Updated 2 weeks ago