Alternatives and similar repositories for bulk_volatility_scanner

Users that are interested in bulk_volatility_scanner are comparing it to the libraries listed below

• tsale / BlueSploit
  BlueSploit is a DFIR framework with the main purpose being to quickly capture artifacts for later review.
  ☆32Updated 6 years ago
• mandiant / ioc-scanner-CVE-2019-19781
  Indicator of Compromise Scanner for CVE-2019-19781
  ☆94Updated 5 years ago
• DefensiveOrigins / APTv4_Defcon28
  Defcon 28 - Red Team Village - Applied Purple Teaming - Why Can't We Be Friends
  ☆26Updated 5 years ago
• EbryxLabs / __DFIR-scripts
  Quick & Dirty DFIR scripts developed by Ebryx DFIR team to keep handy during field assignment
  ☆14Updated last month
• Mostafayahia-hunter / Virustotal-python-API-Domains-IPs-and-URLs-
  ☆21Updated 4 years ago
• Hestat / calamity
  A script to assist in processing forensic RAM captures for malware triage
  ☆26Updated 5 years ago
• jimtin / IRCoreForensicFramework
  Powershell / C# based cross platform forensic framework based for live incident response
  ☆23Updated 5 years ago
• curated-intel / attack-lookup
  A MITRE ATT&CK Lookup Tool
  ☆46Updated last year
• AbdulRhmanAlfaifi / Rhaegal
  Rhaegal is a tool written in Python 3 used to scan Windows Event Logs for suspicious logs. Rhaegal uses custom rule format to detect sus…
  ☆42Updated 2 years ago
• mandiant / goauditparser
  ☆46Updated 2 years ago
• lawiet47 / autoresponder
  Carbon Black Response IR tool
  ☆55Updated 5 years ago
• TobySalusky / cont3xt
  Cont3xt intends to centralize and simplify a structured approach to gathering contextual intelligence in support of technical investigati…
  ☆38Updated last year
• NextronSystems / thor_attck
  THOR MITRE ATT&CK Framework Coverage
  ☆25Updated 5 years ago
• Hestat / soc-threat-hunting
  Repo of python/bash scripts for identifying IoC's in threat feed and other online tools
  ☆26Updated 5 years ago
• sans-blue-team / sec455-wiki
  ☆30Updated 7 years ago
• mattnotmax / update-cyberchef
  CyberChef update scripts in PowerShell & Bash
  ☆17Updated last year
• MISP / threat-actor-intelligence-server
  A simple ReST server to lookup threat actors (by name, synonym or UUID) and returning the corresponding MISP galaxy information about the…
  ☆50Updated 5 months ago
• threatexpress / threatbox
  ThreatBox is a standard and controlled Linux based attack platform. I've used a version of this for years. It started as a collection of …
  ☆76Updated last year
• securethelogs / Bluechecker
  Audit Powershell and search from known keywords in history #Blueteam
  ☆25Updated 5 years ago
• hxnoyd / ossem-power-up
  A tool to assess data quality, built on top of the awesome OSSEM.
  ☆80Updated 3 years ago
• JacobPimental / gunslinger
  Gunslinger is used to hunt for Magecart sites using URLScan's API
  ☆31Updated 3 years ago
• visma-prodsec / columbo
  Columbo is a computer forensic analysis tool used to simplify and identify specific patterns in compromised datasets.
  ☆61Updated 4 years ago
• activecm / threat-hunting-labs
  Collection of walkthroughs on various threat hunting techniques
  ☆76Updated 5 years ago
• NettleSec / TriOp
  Tool for quickly gathering information from Shodan.io about the number of IPs which satisfy large number of different queries
  ☆52Updated 3 years ago
• keydet89 / IWSBook
  Site for IWS book content
  ☆17Updated 7 years ago
• nettitude / PoshC2_IOCs
  A list of IOCs applicable to PoshC2
  ☆24Updated 5 years ago
• dhoelzer / DAD
  Log aggregation, analysis, alerting and correlation for Windows, Syslog and text based logs.
  ☆23Updated 9 years ago
• CIRCL / factual-rules-generator
  Factual-rules-generator is an open source project which aims to generate YARA rules about installed software from a machine.
  ☆75Updated 4 years ago
• threathunters-io / QLOG
  Windows Security Logging
  ☆43Updated 3 years ago
• Silv3rHorn / autoripy
  Attempt to replicate the functions of auto_rip by Corey Harrell in Python.
  ☆12Updated last year