sk4la / volatility3-dockerLinks
Volatility, on Docker π³
β41Updated 2 months ago
Alternatives and similar repositories for volatility3-docker
Users that are interested in volatility3-docker are comparing it to the libraries listed below
Sorting:
- Windows symbol tables for Volatility 3β92Updated last year
- Signature-based detection of malware features based on Windows API call sequences. It's like YARA for sandbox API traces!β82Updated 2 years ago
- Yara Rules for Modern Malwareβ78Updated last year
- Volatility 3 Pluginsβ21Updated 3 years ago
- Powershell Linterβ86Updated 2 months ago
- 100 Days of YARA to be updated with rules & ideas as the year progressesβ60Updated 3 years ago
- Lazarus analysis tools and research reportβ57Updated 2 years ago
- Volatility3 plugins developed and maintained by the communityβ62Updated 2 years ago
- A C# based tool for analysing malicious OneNote documentsβ118Updated 2 years ago
- Repository of Yara Rulesβ139Updated 3 weeks ago
- A small util to brute-force prefetch hashesβ77Updated 3 years ago
- A collection of tools and detections for the Sliver C2 Frameworjβ133Updated 2 years ago
- β21Updated last year
- Malware Analysis toolsβ26Updated last year
- A zero dependency and customizable Python library for scanning Windows and Linux process memory.β66Updated 2 years ago
- A ProcessMonitor visualization application written in rust.β184Updated 2 years ago
- Linpmem is a linux memory acquisition toolβ95Updated 7 months ago
- Rules Shared by the Community from 100 Days of YARA 2023β78Updated 2 years ago
- Configuration Extractors for Malwareβ123Updated 9 months ago
- Volatility Symbol Generator for Linux Kernelsβ37Updated 2 years ago
- Visually inspect and force decode YARA and regex matches found in both binary and text data with colors. Lots of colors.β146Updated last week
- PowerShell Script Analyzerβ70Updated 2 years ago
- VBScript & VBA source-to-source deobfuscator with partial-evaluationβ80Updated last year
- Reads and prints information from the website MalAPI.ioβ20Updated 3 years ago
- LILO based Pulse Secure appliance disk image decryptorβ13Updated last year
- MSI Dump - a tool that analyzes malicious MSI installation packages, extracts files, streams, binary data and incorporates YARA scanner.β226Updated 2 years ago
- Modular malware analysis artifact collection and correlation frameworkβ53Updated last year
- bad stuffs by bad guysβ49Updated 3 years ago
- YARA rule analyzer to improve rule quality and performanceβ110Updated 3 weeks ago
- Malware Muncher is a proof-of-concept Python script that utilizes the Frida framework for binary instrumentation and API hooking, enablinβ¦β45Updated 2 years ago