Alternatives and similar repositories for volatility-bitlocker

Users that are interested in volatility-bitlocker are comparing it to the libraries listed below

• MagnetForensics / Hibr2Bin
  Comae Hibernation File Decompressor
  ☆155Updated 2 years ago
• mandiant / win10_volatility
  An advanced memory forensics framework
  ☆96Updated 6 years ago
• Paul-Tew / lifer
  Windows link file (shortcuts) examiner
  ☆67Updated last year
• tomchop / unxor
  unXOR will search a XORed file and try to guess the key using known-plaintext attacks.
  ☆144Updated 5 years ago
• memoryforensics1 / VolExp
  volatility explorer
  ☆92Updated 4 years ago
• cube0x8 / ChromeRagamuffin
  Google Chrome internals analysis using Volatility
  ☆42Updated 2 years ago
• you0708 / lznt1
  Python implementation of LZNT1 compression/decompression
  ☆65Updated 5 years ago
• silascutler / LnkParse
  Windows Shortcut file (LNK) parser
  ☆136Updated 2 years ago
• Te-k / pecli
  CLI tool to analyze PE files
  ☆88Updated last year
• SecurityRiskAdvisors / PDBlaster
  ☆48Updated 5 years ago
• aleksost / MemoryDecompression
  Tool to decompress data from Windows 10 page files and memory dumps, that has been compressed by the Windows 10 memory manager.
  ☆51Updated 6 years ago
• kevthehermit / volatility_plugins
  Volatility Plugins
  ☆64Updated 2 years ago
• denisugarte / PowerDrive
  A tool for de-obfuscating PowerShell scripts
  ☆71Updated 6 years ago
• intezer / analyze-community-ghidra-plugin
  Ghidra plugin for https://analyze.intezer.com
  ☆72Updated 2 years ago
• woanware / JumpLister
  ☆18Updated 12 years ago
• williballenthin / LfLe
  Recover event log entries from an image by heurisitically looking for record structures.
  ☆27Updated 10 years ago
• lemmou / RansomNoteFiles
  ☆24Updated last year
• nccgroup / Royal_APT
  Royal APT - APT15 - Related Information from NCC Group Cyber Defense Operations Research
  ☆53Updated 7 years ago
• RealityNet / hotoloti
  documentation, scripts, tools related to Zena Forensics (http://blog.digital-forensics.it)
  ☆100Updated 8 years ago
• jschicht / UsnJrnl2Csv
  Parser for $UsnJrnl on NTFS
  ☆117Updated 2 years ago
• SafeBreach-Labs / AltFS
  The Alternative Fileless File System
  ☆57Updated 6 years ago
• NTFSparse / ntfs_parse
  NTFS parser, plus linking capabilites between MFT LogFile and UsnJrnl
  ☆37Updated 9 years ago
• archcloudlabs / r2elk
  Radare2 Metadata Extraction to Elasticsearch
  ☆23Updated last year
• ANSSI-FR / bootcode_parser
  A boot record parser that identifies known good signatures for MBR, VBR and IPL.
  ☆96Updated 8 months ago
• Neo23x0 / DLLRunner
  Smart DLL execution for malware analysis in sandbox systems
  ☆144Updated 10 years ago
• elceef / bitlocker
  Volatility Framework plugin for extracting BitLocker FVEK (Full Volume Encryption Key)
  ☆237Updated 9 years ago
• breppo / Volatility-BitLocker
  Volatility plugin to retrieve the Full Volume Encryption Key in memory. The FVEK can then be used with the help of Dislocker to mount the…
  ☆52Updated 5 years ago
• dfirfpi / dpapilab
  Windows DPAPI laboratory
  ☆93Updated 7 years ago
• arieljt / VTSubmitter-Maltego
  A Maltego transform for VirusTotal Submitter Information
  ☆35Updated 6 years ago
• Synacktiv-contrib / stuffz
  Repository containing many useful scripts
  ☆74Updated 3 years ago