Alternatives and similar repositories for All-In-USB

Users that are interested in All-In-USB are comparing it to the libraries listed below

• LETHAL-FORENSICS / Collect-MemoryDump
  Collect-MemoryDump - Automated Creation of Windows Memory Snapshots for DFIR
  ☆251Updated 2 months ago
• NextronSystems / ransomware-simulator
  Ransomware simulator written in Golang
  ☆465Updated 3 years ago
• 3CORESec / MAL-CL
  MAL-CL (Malicious Command-Line)
  ☆323Updated 2 years ago
• EricZimmerman / AmcacheParser
  Parses amcache.hve files, but with a twist!
  ☆147Updated 11 months ago
• BSI-Bund / RdpCacheStitcher
  RdpCacheStitcher is a tool that supports forensic analysts in reconstructing useful images out of RDP cache bitmaps.
  ☆303Updated 2 years ago
• LOLBAS-Project / LOLBAS-Project.github.io
  ☆89Updated last month
• WithSecureLabs / LinuxCatScale
  Incident Response collection and processing scripts with automated reporting scripts
  ☆319Updated last year
• travisfoley / dfirtriage
  Digital forensic acquisition tool for Windows based incident response.
  ☆346Updated last year
• mandiant / VM-Packages
  Chocolatey packages supporting the analysis environment projects FLARE-VM & Commando VM.
  ☆208Updated last week
• OWNsecurity / fastir_artifacts
  Live forensic artifacts collector
  ☆173Updated last year
• EricZimmerman / PECmd
  Prefetch Explorer Command Line
  ☆276Updated 11 months ago
• op7ic / BlueTeam.Lab
  Blue Team detection lab created with Terraform and Ansible in Azure.
  ☆175Updated last year
• nasbench / MindMaps
  #ThreatHunting #DFIR #Malware #Detection Mind Maps
  ☆305Updated 4 years ago
• dwmetz / CyberPipe
  An easy to use PowerShell script to collect memory and disk forensics for DFIR investigations.
  ☆342Updated last month
• UnkL4b / BabyShark
  Basic C2 Server
  ☆193Updated 4 years ago
• splunk / melting-cobalt
  A Cobalt Strike Scanner that retrieves detected Team Server beacons into a JSON object
  ☆170Updated 3 years ago
• carlospolop / autoVolatility
  Run several volatility plugins at the same time
  ☆117Updated 3 years ago
• pr0xylife / Qakbot
  ☆194Updated last year
• keydet89 / RegRipper3.0
  RegRipper3.0
  ☆671Updated last year
• op7ic / EDR-Testing-Script
  Test the accuracy of Endpoint Detection and Response (EDR) software with simple script which executes various ATT&CK/LOLBAS/Invoke-Cradle…
  ☆310Updated 4 years ago
• NVISOsecurity / evtx-hunter
  evtx-hunter helps to quickly spot interesting security-related activity in Windows Event Viewer (EVTX) files.
  ☆156Updated 4 years ago
• ion-storm / sysmon-edr
  Sysmon EDR POC Build within Powershell to prove ability.
  ☆226Updated 4 years ago
• JoelGMSec / PSRansom
  PowerShell Ransomware Simulator with C2 Server
  ☆496Updated last week
• PwnDexter / Invoke-EDRChecker
  Checks running processes, process metadata, Dlls loaded into your current process and the each DLLs metadata, common install directories,…
  ☆272Updated 2 years ago
• muteb / Hoarder
  This script is made to collect the most valiable artifacts for foreniscs or incident reponse investigation rather than imaging the whole …
  ☆209Updated 5 years ago
• theflakes / reg_hunter
  Blueteam operational triage registry hunting/forensic tool.
  ☆150Updated 4 months ago
• malienist / lupo
  Lupo - Malware IOC Extractor. Debugging module for Malware Analysis Automation
  ☆106Updated 3 years ago
• persistence-info / persistence-info.github.io
  ☆514Updated 2 years ago
• d4rk-d4nph3 / Ransomware-Reports
  This repo is a collection of Ransomware reports from vendors, researchers, etc.
  ☆120Updated 3 years ago
• SentineLabs / SentinelLabs_RevCore_Tools
  The Windows Malware Analysis Reversing Core Tools
  ☆97Updated 5 years ago