microsoft / avmlLinks
AVML - Acquire Volatile Memory for Linux
☆1,046Updated last week
Alternatives and similar repositories for avml
Users that are interested in avml are comparing it to the libraries listed below
Sorting:
- A Fast (and safe) parser for the Windows XML Event Log (EVTX) format☆874Updated 3 weeks ago
- Standard collection of rules for capa: the tool for enumerating the capabilities of programs☆671Updated 3 weeks ago
- A rewrite of YARA in Rust.☆1,012Updated this week
- ReversingLabs YARA Rules☆891Updated 2 months ago
- The multi-platform memory acquisition tool.☆935Updated 3 months ago
- Digital Forensics artifact repository☆1,191Updated this week
- DRAKVUF Sandbox - automated hypervisor-level malware analysis system☆1,261Updated 2 weeks ago
- RegRipper3.0☆676Updated last year
- Dissect is a digital forensics & incident response framework and toolset that allows you to quickly access and analyse forensic artefacts…☆1,058Updated 2 months ago
- UAC is a powerful and extensible incident response tool designed for forensic investigators, security analysts, and IT professionals. It …☆1,232Updated this week
- Super timeline all the things☆2,001Updated last week
- yarGen is a generator for YARA rules☆1,770Updated 2 weeks ago
- Sysmon for Linux☆2,054Updated 6 months ago
- High Octane Triage Analysis☆806Updated last week
- LiME (formerly DMD) is a Loadable Kernel Module (LKM), which allows the acquisition of volatile memory from Linux and Linux-based devices…☆1,929Updated 2 months ago
- Indicators of Compromises (IOC) of our various investigations☆1,913Updated last month
- Repository of YARA rules made by Trellix ATR Team☆626Updated 10 months ago
- Distributed malware processing framework based on Python, Redis and S3.☆459Updated last month
- Sophos-originated indicators-of-compromise from published reports☆649Updated 2 weeks ago
- analyzeMFT.py is designed to fully parse the MFT file from an NTFS filesystem and present the results as accurately as possible in multip…☆519Updated 5 months ago
- Fuzzy hashing API and fuzzy hashing tool☆772Updated 4 months ago
- A machine learning tool that ranks strings based on their relevance for malware analysis.☆748Updated last week
- AssemblyLine 4: File triage and malware analysis☆417Updated this week
- RDP Bitmap Cache parser☆630Updated last year
- YARA signature and IOC database for my scanners and tools☆2,845Updated 3 weeks ago
- Rekall Memory Forensic Framework☆1,993Updated 5 years ago
- The Python interface for YARA☆725Updated 8 months ago
- Forensics artefact collection tool for systems running Microsoft Windows☆429Updated 10 months ago
- Everything related to Linux Forensics☆717Updated 2 years ago
- Real-time, container-based file scanning at enterprise scale☆970Updated 2 weeks ago