Alternatives and similar repositories for All-In-USB

Users that are interested in All-In-USB are comparing it to the libraries listed below

• LETHAL-FORENSICS / Collect-MemoryDump
  Collect-MemoryDump - Automated Creation of Windows Memory Snapshots for DFIR
  ☆248Updated this week
• 3CORESec / MAL-CL
  MAL-CL (Malicious Command-Line)
  ☆319Updated 2 years ago
• EricZimmerman / AmcacheParser
  Parses amcache.hve files, but with a twist!
  ☆142Updated 9 months ago
• BSI-Bund / RdpCacheStitcher
  RdpCacheStitcher is a tool that supports forensic analysts in reconstructing useful images out of RDP cache bitmaps.
  ☆294Updated 2 years ago
• dwmetz / CyberPipe
  An easy to use PowerShell script to collect memory and disk forensics for DFIR investigations.
  ☆335Updated 2 weeks ago
• mandiant / VM-Packages
  Chocolatey packages supporting the analysis environment projects FLARE-VM & Commando VM.
  ☆204Updated this week
• carlospolop / autoVolatility
  Run several volatility plugins at the same time
  ☆115Updated 3 years ago
• LOLBAS-Project / LOLBAS-Project.github.io
  ☆86Updated last month
• NextronSystems / ransomware-simulator
  Ransomware simulator written in Golang
  ☆452Updated 3 years ago
• OWNsecurity / fastir_artifacts
  Live forensic artifacts collector
  ☆172Updated last year
• splunk / melting-cobalt
  A Cobalt Strike Scanner that retrieves detected Team Server beacons into a JSON object
  ☆170Updated 3 years ago
• EricZimmerman / PECmd
  Prefetch Explorer Command Line
  ☆274Updated 9 months ago
• keydet89 / RegRipper3.0
  RegRipper3.0
  ☆655Updated 10 months ago
• WithSecureLabs / LinuxCatScale
  Incident Response collection and processing scripts with automated reporting scripts
  ☆312Updated last year
• NVISOsecurity / evtx-hunter
  evtx-hunter helps to quickly spot interesting security-related activity in Windows Event Viewer (EVTX) files.
  ☆156Updated 3 years ago
• malienist / lupo
  Lupo - Malware IOC Extractor. Debugging module for Malware Analysis Automation
  ☆106Updated 3 years ago
• pr0xylife / Qakbot
  ☆195Updated last year
• muteb / Hoarder
  This script is made to collect the most valiable artifacts for foreniscs or incident reponse investigation rather than imaging the whole …
  ☆205Updated 5 years ago
• travisfoley / dfirtriage
  Digital forensic acquisition tool for Windows based incident response.
  ☆344Updated last year
• op7ic / BlueTeam.Lab
  Blue Team detection lab created with Terraform and Ansible in Azure.
  ☆168Updated 11 months ago
• codeyourweb / fastfinder
  Incident Response - Fast suspicious file finder
  ☆245Updated 3 years ago
• nasbench / MindMaps
  #ThreatHunting #DFIR #Malware #Detection Mind Maps
  ☆303Updated 3 years ago
• CrowdStrike / SuperMem
  A python script developed to process Windows memory images based on triage type.
  ☆265Updated last year
• UnkL4b / BabyShark
  Basic C2 Server
  ☆193Updated 4 years ago
• mandiant / gootloader
  Collection of scripts used to deobfuscate GOOTLOADER malware samples.
  ☆64Updated 10 months ago
• yarox24 / EvtxHussar
  Initial triage of Windows Event logs
  ☆102Updated last year
• fireeye / BitsParser
  ☆150Updated last year
• gtworek / VolatileDataCollector
  ☆203Updated last year
• PwnDexter / Invoke-EDRChecker
  Checks running processes, process metadata, Dlls loaded into your current process and the each DLLs metadata, common install directories,…
  ☆270Updated 2 years ago
• op7ic / EDR-Testing-Script
  Test the accuracy of Endpoint Detection and Response (EDR) software with simple script which executes various ATT&CK/LOLBAS/Invoke-Cradle…
  ☆307Updated 4 years ago