Alternatives and similar repositories for All-In-USB

Users that are interested in All-In-USB are comparing it to the libraries listed below

• mandiant / VM-Packages
  Chocolatey packages supporting the analysis environment projects FLARE-VM & Commando VM.
  ☆201Updated this week
• LETHAL-FORENSICS / Collect-MemoryDump
  Collect-MemoryDump - Automated Creation of Windows Memory Snapshots for DFIR
  ☆248Updated 6 months ago
• BSI-Bund / RdpCacheStitcher
  RdpCacheStitcher is a tool that supports forensic analysts in reconstructing useful images out of RDP cache bitmaps.
  ☆291Updated 2 years ago
• EricZimmerman / AmcacheParser
  Parses amcache.hve files, but with a twist!
  ☆142Updated 9 months ago
• 3CORESec / MAL-CL
  MAL-CL (Malicious Command-Line)
  ☆319Updated 2 years ago
• LOLBAS-Project / LOLBAS-Project.github.io
  ☆86Updated last week
• EricZimmerman / PECmd
  Prefetch Explorer Command Line
  ☆271Updated 9 months ago
• keydet89 / RegRipper3.0
  RegRipper3.0
  ☆647Updated 10 months ago
• OWNsecurity / fastir_artifacts
  Live forensic artifacts collector
  ☆171Updated last year
• carlospolop / autoVolatility
  Run several volatility plugins at the same time
  ☆114Updated 2 years ago
• travisfoley / dfirtriage
  Digital forensic acquisition tool for Windows based incident response.
  ☆344Updated last year
• WithSecureLabs / LinuxCatScale
  Incident Response collection and processing scripts with automated reporting scripts
  ☆311Updated last year
• jymcheong / SysmonResources
  Consolidation of various resources related to Microsoft Sysmon & sample data/log
  ☆115Updated 4 years ago
• dwmetz / CyberPipe
  An easy to use PowerShell script to collect memory and disk forensics for DFIR investigations.
  ☆332Updated 5 months ago
• op7ic / BlueTeam.Lab
  Blue Team detection lab created with Terraform and Ansible in Azure.
  ☆163Updated 10 months ago
• lucky-luk3 / Grafiki
  Threat Hunting tool about Sysmon and graphs
  ☆334Updated 2 years ago
• splunk / melting-cobalt
  A Cobalt Strike Scanner that retrieves detected Team Server beacons into a JSON object
  ☆170Updated 2 years ago
• NextronSystems / ransomware-simulator
  Ransomware simulator written in Golang
  ☆449Updated 3 years ago
• SentineLabs / SentinelLabs_RevCore_Tools
  The Windows Malware Analysis Reversing Core Tools
  ☆96Updated 4 years ago
• op7ic / EDR-Testing-Script
  Test the accuracy of Endpoint Detection and Response (EDR) software with simple script which executes various ATT&CK/LOLBAS/Invoke-Cradle…
  ☆307Updated 3 years ago
• pr0xylife / Qakbot
  ☆195Updated last year
• nasbench / MindMaps
  #ThreatHunting #DFIR #Malware #Detection Mind Maps
  ☆302Updated 3 years ago
• ANSSI-FR / bmc-tools
  RDP Bitmap Cache parser
  ☆570Updated 8 months ago
• EricZimmerman / evtx
  C# based evtx parser with lots of extras
  ☆328Updated last month
• EricZimmerman / MFTECmd
  Parses $MFT from NTFS file systems
  ☆267Updated 5 months ago
• yarox24 / EvtxHussar
  Initial triage of Windows Event logs
  ☆102Updated last year
• muteb / Hoarder
  This script is made to collect the most valiable artifacts for foreniscs or incident reponse investigation rather than imaging the whole …
  ☆204Updated 4 years ago
• NVISOsecurity / evtx-hunter
  evtx-hunter helps to quickly spot interesting security-related activity in Windows Event Viewer (EVTX) files.
  ☆154Updated 3 years ago
• CrowdStrike / SuperMem
  A python script developed to process Windows memory images based on triage type.
  ☆265Updated last year
• alex-cart / LEAF
  Linux Evidence Acquisition Framework
  ☆118Updated last year