Alternatives and similar repositories for volatility-plugins

Users that are interested in volatility-plugins are comparing it to the libraries listed below

• volatilityfoundation / community
  Volatility plugins developed and maintained by the community
  ☆374Updated 4 years ago
• DidierStevens / Beta
  Beta versions of my software
  ☆268Updated 6 months ago
• volatilityfoundation / profiles
  Volatility profiles for Linux and Mac OS X
  ☆327Updated 3 years ago
• mandiant / win10_volatility
  An advanced memory forensics framework
  ☆96Updated 6 years ago
• ANSSI-FR / bmc-tools
  RDP Bitmap Cache parser
  ☆626Updated 11 months ago
• R3MRUM / PSDecode
  PowerShell script for deobfuscating encoded PowerShell scripts
  ☆430Updated 4 years ago
• f0wl / MalwareLab_VM-Setup
  Setup scripts for my Malware Analysis VMs
  ☆257Updated 3 years ago
• kevthehermit / volatility_plugins
  Volatility Plugins
  ☆64Updated 2 years ago
• DarkenCode / yara-rules
  Repository of yara rules
  ☆47Updated 10 years ago
• monnappa22 / HollowFind
  Hollowfind is a Volatility plugin to detect different types of process hollowing techniques used in the wild to bypass, confuse, deflect …
  ☆142Updated 3 years ago
• hiddenillusion / AnalyzePE
  Wraps around various tools and provides some additional checks/information to produce a centralized report of a PE file.
  ☆208Updated 11 years ago
• gleeda / memtriage
  Allows you to quickly query a Windows machine for RAM artifacts
  ☆219Updated 5 years ago
• EricZimmerman / AmcacheParser
  Parses amcache.hve files, but with a twist!
  ☆147Updated 11 months ago
• WithSecureLabs / snake
  snake - a malware storage zoo
  ☆217Updated 2 years ago
• ashemery / CuckooVM
  Cuckoo running in a nested hypervisor
  ☆128Updated 5 years ago
• OALabs / BlobRunner
  Quickly debug shellcode extracted during malware analysis
  ☆622Updated 2 years ago
• MarioVilas / shellcode_tools
  Miscellaneous tools written in Python, mostly centered around shellcodes.
  ☆147Updated 10 years ago
• fox-it / mkYARA
  Generating YARA rules based on binary code
  ☆218Updated 4 years ago
• Te-k / cobaltstrike
  Code and yara rules to detect and analyze Cobalt Strike
  ☆272Updated 4 years ago
• jschicht / LogFileParser
  Parser for $LogFile on NTFS
  ☆209Updated 7 months ago
• denisugarte / PowerDrive
  A tool for de-obfuscating PowerShell scripts
  ☆71Updated 6 years ago
• kirk-sayre-work / VBASeismograph
  A tool for detecting VBA stomping.
  ☆101Updated 3 years ago
• Neo23x0 / DLLRunner
  Smart DLL execution for malware analysis in sandbox systems
  ☆143Updated 10 years ago
• tribalchicken / volatility-bitlocker
  Volatility plugin to extract BitLocker Full Volume Encryption Keys (FVEK)
  ☆70Updated 4 years ago
• volatilityfoundation / community3
  Volatility3 plugins developed and maintained by the community
  ☆61Updated 2 years ago
• davidpany / WMI_Forensics
  ☆309Updated 5 years ago
• 0x0be / PEpper
  An open source script to perform malware static analysis on Portable Executable
  ☆322Updated 2 years ago
• sysopfb / malware_decoders
  Static based decoders for malware samples
  ☆94Updated 5 years ago
• silascutler / LnkParse
  Windows Shortcut file (LNK) parser
  ☆137Updated 3 years ago
• kevthehermit / VolUtility
  Web App for Volatility framework
  ☆389Updated 5 months ago