microsoft / avmlLinks
AVML - Acquire Volatile Memory for Linux
☆961Updated this week
Alternatives and similar repositories for avml
Users that are interested in avml are comparing it to the libraries listed below
Sorting:
- A Fast (and safe) parser for the Windows XML Event Log (EVTX) format☆770Updated this week
- Standard collection of rules for capa: the tool for enumerating the capabilities of programs☆607Updated 3 weeks ago
- A rewrite of YARA in Rust.☆818Updated this week
- ReversingLabs YARA Rules☆828Updated last week
- The multi-platform memory acquisition tool.☆807Updated 3 weeks ago
- DRAKVUF Sandbox - automated hypervisor-level malware analysis system☆1,161Updated this week
- Repository of YARA rules made by Trellix ATR Team☆602Updated 3 months ago
- RegRipper3.0☆618Updated 7 months ago
- Distributed malware processing framework based on Python, Redis and S3.☆431Updated 2 weeks ago
- Digital Forensics artifact repository☆1,138Updated this week
- UAC is a powerful and extensible incident response tool designed for forensic investigators, security analysts, and IT professionals. It …☆1,015Updated this week
- Sysmon for Linux☆1,913Updated last week
- Indicators of Compromises (IOC) of our various investigations☆1,793Updated last week
- yarGen is a generator for YARA rules☆1,665Updated 3 months ago
- Dissect is a digital forensics & incident response framework and toolset that allows you to quickly access and analyse forensic artefacts…☆1,022Updated 2 weeks ago
- Sophos-originated indicators-of-compromise from published reports☆604Updated last month
- Forensics artefact collection tool for systems running Microsoft Windows☆416Updated 3 months ago
- RDP Bitmap Cache parser☆542Updated 5 months ago
- This repository serves as a place for community created Targets and Modules for use with KAPE.☆747Updated this week
- MBC content in markdown☆462Updated last month
- Cuckoo3 is a Python 3 open source automated malware analysis system.☆730Updated 2 weeks ago
- High Octane Triage Analysis☆754Updated this week
- Super timeline all the things☆1,873Updated last month
- Malware repository component for samples & static configuration with REST API interface.☆362Updated 2 weeks ago
- Collection of private Yara rules.☆358Updated 2 months ago
- Fuzzy hashing API and fuzzy hashing tool☆732Updated 4 years ago
- The Python interface for YARA☆701Updated last month
- A collection of YARA rules we wish to share with the world, most probably referenced from http://blog.inquest.net.☆377Updated 3 years ago
- LiME (formerly DMD) is a Loadable Kernel Module (LKM), which allows the acquisition of volatile memory from Linux and Linux-based devices…☆1,831Updated 8 months ago
- analyzeMFT.py is designed to fully parse the MFT file from an NTFS filesystem and present the results as accurately as possible in multip…☆486Updated this week