Alternatives and similar repositories for avml

Users that are interested in avml are comparing it to the libraries listed below

• omerbenamram / evtx
  A Fast (and safe) parser for the Windows XML Event Log (EVTX) format
  ☆852Updated 2 weeks ago
• VirusTotal / yara-x
  A rewrite of YARA in Rust.
  ☆947Updated this week
• Velocidex / WinPmem
  The multi-platform memory acquisition tool.
  ☆900Updated 2 months ago
• mandiant / capa-rules
  Standard collection of rules for capa: the tool for enumerating the capabilities of programs
  ☆659Updated last week
• reversinglabs / reversinglabs-yara-rules
  ReversingLabs YARA Rules
  ☆884Updated last month
• keydet89 / RegRipper3.0
  RegRipper3.0
  ☆668Updated last year
• CERT-Polska / drakvuf-sandbox
  DRAKVUF Sandbox - automated hypervisor-level malware analysis system
  ☆1,248Updated last week
• ForensicArtifacts / artifacts
  Digital Forensics artifact repository
  ☆1,184Updated 2 weeks ago
• advanced-threat-research / Yara-Rules
  Repository of YARA rules made by Trellix ATR Team
  ☆622Updated 8 months ago
• microsoft / SysmonForLinux
  Sysmon for Linux
  ☆2,032Updated 5 months ago
• tclahr / uac
  UAC is a powerful and extensible incident response tool designed for forensic investigators, security analysts, and IT professionals. It …
  ☆1,197Updated 2 weeks ago
• fox-it / dissect
  Dissect is a digital forensics & incident response framework and toolset that allows you to quickly access and analyse forensic artefacts…
  ☆1,056Updated 3 weeks ago
• eset / malware-ioc
  Indicators of Compromises (IOC) of our various investigations
  ☆1,895Updated 2 weeks ago
• CERT-Polska / karton
  Distributed malware processing framework based on Python, Redis and S3.
  ☆451Updated 2 weeks ago
• Neo23x0 / yarGen
  yarGen is a generator for YARA rules
  ☆1,753Updated 2 months ago
• MBCProject / mbc-markdown
  MBC content in markdown
  ☆503Updated 6 months ago
• EricZimmerman / KapeFiles
  This repository serves as a place for community created Targets and Modules for use with KAPE.
  ☆789Updated last month
• ANSSI-FR / bmc-tools
  RDP Bitmap Cache parser
  ☆614Updated 10 months ago
• 504ensicsLabs / LiME
  LiME (formerly DMD) is a Loadable Kernel Module (LKM), which allows the acquisition of volatile memory from Linux and Linux-based devices…
  ☆1,902Updated last month
• binref / refinery
  High Octane Triage Analysis
  ☆804Updated last week
• cert-ee / cuckoo3
  Cuckoo3 is a Python 3 open source automated malware analysis system.
  ☆784Updated last week
• log2timeline / plaso
  Super timeline all the things
  ☆1,972Updated 3 weeks ago
• CybercentreCanada / assemblyline
  AssemblyLine 4: File triage and malware analysis
  ☆403Updated this week
• sophoslabs / IoCs
  Sophos-originated indicators-of-compromise from published reports
  ☆642Updated last week
• target / strelka
  Real-time, container-based file scanning at enterprise scale
  ☆963Updated last month
• bartblaze / Yara-rules
  Collection of private Yara rules.
  ☆374Updated 3 weeks ago
• CERT-Polska / mwdb-core
  Malware repository component for samples & static configuration with REST API interface.
  ☆371Updated last week
• DFIR-ORC / dfir-orc
  Forensics artefact collection tool for systems running Microsoft Windows
  ☆427Updated 8 months ago
• MarkBaggett / srum-dump
  A forensics tool to convert the data in the Windows srum (System Resource Usage Monitor) database to an xlsx spreadsheet.
  ☆732Updated 6 months ago
• rowingdude / analyzeMFT
  analyzeMFT.py is designed to fully parse the MFT file from an NTFS filesystem and present the results as accurately as possible in multip…
  ☆511Updated 4 months ago