Alternatives and similar repositories for All-In-USB

Users that are interested in All-In-USB are comparing it to the libraries listed below

• EricZimmerman / AmcacheParser
  Parses amcache.hve files, but with a twist!
  ☆149Updated last year
• OWNsecurity / fastir_artifacts
  Live forensic artifacts collector
  ☆172Updated last year
• BSI-Bund / RdpCacheStitcher
  RdpCacheStitcher is a tool that supports forensic analysts in reconstructing useful images out of RDP cache bitmaps.
  ☆310Updated 2 years ago
• keydet89 / RegRipper3.0
  RegRipper3.0
  ☆681Updated last year
• LETHAL-FORENSICS / Collect-MemoryDump
  Collect-MemoryDump - Automated Creation of Windows Memory Snapshots for DFIR
  ☆252Updated 3 months ago
• travisfoley / dfirtriage
  Digital forensic acquisition tool for Windows based incident response.
  ☆346Updated last year
• 3CORESec / MAL-CL
  MAL-CL (Malicious Command-Line)
  ☆322Updated 3 years ago
• LOLBAS-Project / LOLBAS-Project.github.io
  ☆90Updated 2 months ago
• dwmetz / CyberPipe
  An easy to use PowerShell script to collect memory and disk forensics for DFIR investigations.
  ☆342Updated 2 months ago
• NextronSystems / ransomware-simulator
  Ransomware simulator written in Golang
  ☆470Updated 3 years ago
• WithSecureLabs / LinuxCatScale
  Incident Response collection and processing scripts with automated reporting scripts
  ☆319Updated last year
• op7ic / BlueTeam.Lab
  Blue Team detection lab created with Terraform and Ansible in Azure.
  ☆176Updated last year
• mandiant / VM-Packages
  Chocolatey packages supporting the analysis environment projects FLARE-VM & Commando VM.
  ☆215Updated this week
• carlospolop / autoVolatility
  Run several volatility plugins at the same time
  ☆117Updated 3 years ago
• alex-cart / LEAF
  Linux Evidence Acquisition Framework
  ☆119Updated last year
• codeyourweb / fastfinder
  Incident Response - Fast suspicious file finder
  ☆249Updated last week
• splunk / melting-cobalt
  A Cobalt Strike Scanner that retrieves detected Team Server beacons into a JSON object
  ☆168Updated 3 years ago
• malienist / lupo
  Lupo - Malware IOC Extractor. Debugging module for Malware Analysis Automation
  ☆105Updated 3 years ago
• MazX0p / ThreatHound
  ☆160Updated 2 years ago
• nasbench / MindMaps
  #ThreatHunting #DFIR #Malware #Detection Mind Maps
  ☆306Updated 4 years ago
• NVISOsecurity / evtx-hunter
  evtx-hunter helps to quickly spot interesting security-related activity in Windows Event Viewer (EVTX) files.
  ☆158Updated 4 years ago
• lucky-luk3 / Grafiki
  Threat Hunting tool about Sysmon and graphs
  ☆336Updated 2 years ago
• op7ic / EDR-Testing-Script
  Test the accuracy of Endpoint Detection and Response (EDR) software with simple script which executes various ATT&CK/LOLBAS/Invoke-Cradle…
  ☆312Updated 4 years ago
• pr0xylife / Qakbot
  ☆194Updated 2 years ago
• EricZimmerman / PECmd
  Prefetch Explorer Command Line
  ☆280Updated last year
• EricZimmerman / evtx
  C# based evtx parser with lots of extras
  ☆340Updated 5 months ago
• harelsegev / prefetch-hash-cracker
  A small util to brute-force prefetch hashes
  ☆77Updated 3 years ago
• theflakes / reg_hunter
  Blueteam operational triage registry hunting/forensic tool.
  ☆149Updated 5 months ago
• yarox24 / EvtxHussar
  Initial triage of Windows Event logs
  ☆106Updated last year
• EricZimmerman / LECmd
  Lnk Explorer Command line edition!!
  ☆335Updated last year