Alternatives and similar repositories for All-In-USB

Users that are interested in All-In-USB are comparing it to the libraries listed below

• EricZimmerman / AmcacheParser
  Parses amcache.hve files, but with a twist!
  ☆148Updated last year
• LETHAL-FORENSICS / Collect-MemoryDump
  Collect-MemoryDump - Automated Creation of Windows Memory Snapshots for DFIR
  ☆252Updated 3 months ago
• BSI-Bund / RdpCacheStitcher
  RdpCacheStitcher is a tool that supports forensic analysts in reconstructing useful images out of RDP cache bitmaps.
  ☆310Updated 2 years ago
• carlospolop / autoVolatility
  Run several volatility plugins at the same time
  ☆117Updated 3 years ago
• OWNsecurity / fastir_artifacts
  Live forensic artifacts collector
  ☆172Updated last year
• WithSecureLabs / LinuxCatScale
  Incident Response collection and processing scripts with automated reporting scripts
  ☆319Updated last year
• mandiant / VM-Packages
  Chocolatey packages supporting the analysis environment projects FLARE-VM & Commando VM.
  ☆214Updated this week
• 3CORESec / MAL-CL
  MAL-CL (Malicious Command-Line)
  ☆322Updated 3 years ago
• LOLBAS-Project / LOLBAS-Project.github.io
  ☆90Updated last month
• keydet89 / RegRipper3.0
  RegRipper3.0
  ☆678Updated last year
• travisfoley / dfirtriage
  Digital forensic acquisition tool for Windows based incident response.
  ☆346Updated last year
• op7ic / BlueTeam.Lab
  Blue Team detection lab created with Terraform and Ansible in Azure.
  ☆176Updated last year
• splunk / melting-cobalt
  A Cobalt Strike Scanner that retrieves detected Team Server beacons into a JSON object
  ☆168Updated 3 years ago
• EricZimmerman / PECmd
  Prefetch Explorer Command Line
  ☆279Updated last year
• NextronSystems / ransomware-simulator
  Ransomware simulator written in Golang
  ☆470Updated 3 years ago
• PwnDexter / Invoke-EDRChecker
  Checks running processes, process metadata, Dlls loaded into your current process and the each DLLs metadata, common install directories,…
  ☆274Updated 2 years ago
• malienist / lupo
  Lupo - Malware IOC Extractor. Debugging module for Malware Analysis Automation
  ☆105Updated 3 years ago
• dwmetz / CyberPipe
  An easy to use PowerShell script to collect memory and disk forensics for DFIR investigations.
  ☆342Updated last month
• NVISOsecurity / evtx-hunter
  evtx-hunter helps to quickly spot interesting security-related activity in Windows Event Viewer (EVTX) files.
  ☆158Updated 4 years ago
• pr0xylife / Qakbot
  ☆194Updated last year
• codeyourweb / fastfinder
  Incident Response - Fast suspicious file finder
  ☆248Updated last week
• theflakes / reg_hunter
  Blueteam operational triage registry hunting/forensic tool.
  ☆149Updated 4 months ago
• MazX0p / ThreatHound
  ☆160Updated 2 years ago
• nasbench / MindMaps
  #ThreatHunting #DFIR #Malware #Detection Mind Maps
  ☆306Updated 4 years ago
• muteb / Hoarder
  This script is made to collect the most valiable artifacts for foreniscs or incident reponse investigation rather than imaging the whole …
  ☆210Updated 5 years ago
• alex-cart / LEAF
  Linux Evidence Acquisition Framework
  ☆117Updated last year
• strozfriedberg / cobaltstrike-config-extractor
  Cobalt Strike Beacon configuration extractor and parser.
  ☆160Updated 3 months ago
• yarox24 / EvtxHussar
  Initial triage of Windows Event logs
  ☆105Updated last year
• JoelGMSec / PSRansom
  PowerShell Ransomware Simulator with C2 Server
  ☆500Updated 3 weeks ago
• UnkL4b / BabyShark
  Basic C2 Server
  ☆193Updated 4 years ago