solomonsonya / Xavier_MemoryAnalysis_Framework
Xavier Framework is a user interface wrapper built on top of the Volatility(c) memory forensics framework.
☆45Updated 2 years ago
Alternatives and similar repositories for Xavier_MemoryAnalysis_Framework:
Users that are interested in Xavier_MemoryAnalysis_Framework are comparing it to the libraries listed below
- A Jupyter notebook to assist with the analysis of the output generated from Volatility memory extraction framework.☆94Updated last year
- ☆66Updated 2 months ago
- Forensic Artifact Collection Tool Matrix☆82Updated 3 months ago
- A really good DFIR automation for collecting and analyzing evidence designed for cybersecurity professionals.☆151Updated 9 months ago
- The Linux DFIR Collector is a stand-alone collection tool for Gnu / Linux. Dump artifacts in json format with very few impacts on the hos…☆30Updated 2 years ago
- Adversarial Interception Mission Oriented Discovery and Disruption Framework, or AIMOD2, is a structured threat hunting approach to proac…☆86Updated last year
- Some important DFIR Resources☆83Updated last year
- Detection of obfuscated Powershell commands☆54Updated last year
- A browser extension for threat hunting that provides one UI for different SIEMs/EDRs and simplifies investigation☆76Updated 9 months ago
- ☆64Updated 2 years ago
- ☆5Updated 3 months ago
- The LOLBins CTI-Driven (Living-Off-the-Land Binaries Cyber Threat Intelligence Driven) is a project that aims to help cyber defenders und…☆118Updated 10 months ago
- Project based on RegRipper, to extract add'l value/pivot points from TLN events file☆84Updated last week
- Jupyter Notebooks for the Blue Team☆145Updated 2 years ago
- This repo is where I store my Threat Hunting ideas/content☆87Updated last year
- Simple parser to get useful information from AWS S3 logs☆24Updated 3 years ago
- Detection Engineering with YARA☆87Updated last year
- Forensics scripts aimed at automating & enhancing the Forensics Legend Eric Zimmerman's techniques, integrating the statistical detection…☆16Updated last year
- Repo containing various intel-based resources such as threat research, adversary emulation/simulation plan and so on☆81Updated 9 months ago
- Collection of scripts provided for public use☆34Updated 3 months ago
- Memory Baseliner is a script that can compare two windows memory images or perform frequency of occurrence / data stacking analysis on mu…☆51Updated last year
- Script to automate Linux live evidence collection☆27Updated 2 years ago
- Linux Baseline and Forensic Triage Tool - BETA☆53Updated 2 years ago
- ☆86Updated last year
- Incident Response documents and tooling☆68Updated last year
- Algorithme d'apprentissage statistique permettant de créer un modèle sur les lignes de commandes des évènements "Création de Processus", …☆81Updated last year
- The Threat Actor Profile Guide for CTI Analysts☆104Updated last year
- BlackBerry Threat Research & Intelligence☆97Updated last year
- Harness the power of Splunk for your investigations☆88Updated 2 months ago
- YARA rule analyzer to improve rule quality and performance☆96Updated last month