vavarachen / volatility_automationView external linksLinks
A tool to automate memory dump processing using Volatility, including optional Splunk integration.
☆12Jul 29, 2020Updated 5 years ago
Alternatives and similar repositories for volatility_automation
Users that are interested in volatility_automation are comparing it to the libraries listed below
Sorting:
- ☆536Feb 3, 2026Updated last week
- A hex viewer for the sleuths!☆20Nov 7, 2025Updated 3 months ago
- FileSigExtractor is a python based tool which extracts the file signatures of all files within a directory and writes the output to a CSV…☆10Jul 15, 2023Updated 2 years ago
- Automating simple report creating of threat intelligence using ChatGPT and Greynoise API.☆10Oct 3, 2023Updated 2 years ago
- Sentinel BEC IR☆14Aug 18, 2022Updated 3 years ago
- PowerShell script useful for Incident Response and security/configuration baselines for Windows Vista and later☆20Feb 23, 2016Updated 9 years ago
- WLEAPP is an open source project that aims to parse Windows OS artifacts for the purpose of triage analysis.☆33Nov 16, 2023Updated 2 years ago
- Azure AD Incident Response☆27Oct 8, 2021Updated 4 years ago
- Forensics triage tool relying on Volatility and Foremost☆25Dec 3, 2023Updated 2 years ago
- python wrapper to use tshark for file extraction from the command line.☆26Nov 15, 2018Updated 7 years ago
- Intelligence around common attacker behaviors (MITRE ATT&CK TTPs), in the form of ATT&CK Navigator "layer" json files.☆36Aug 12, 2022Updated 3 years ago
- In this repository you may find KQL (Kusto Query Language) queries and Watchlist schemes for data sources related to Microsoft Sentinel (…☆134Dec 18, 2025Updated last month
- Python script to walk a folder or a zip file for SQLite Databases☆37Sep 20, 2023Updated 2 years ago
- A simple PowerShell script that we can use for easing the process of creating a reverse shell and automating Meterpreter update☆67Jan 31, 2020Updated 6 years ago
- Terraform Packager Scripts☆12Nov 12, 2025Updated 3 months ago
- ☆33Oct 25, 2021Updated 4 years ago
- Jupyter Notebooks for the Blue Team☆39Jan 16, 2025Updated last year
- A preconfigured Windows-based system designed for rapid forensic investigations in both Azure and AWS.☆40Mar 25, 2024Updated last year
- ReWrite of AChoir in Go for Cross Platform forensic artifact collection and processing☆41Feb 2, 2026Updated last week
- Automated Memory Forensic☆34Jul 18, 2018Updated 7 years ago
- Queries from the blog posts.☆15Oct 6, 2024Updated last year
- Free, open source crypto trading bot☆44Aug 31, 2025Updated 5 months ago
- Lazy SPL to detect Spring4Shell exploitation☆12Jul 8, 2022Updated 3 years ago
- AI-powered trading bot using Python, pandas, scikit-learn, NumPy, and TensorFlow. Interacts with Binance API for cryptocurrency trading b…☆11Sep 12, 2024Updated last year
- An HTTP proxy library for Go☆17Jun 22, 2022Updated 3 years ago
- It's a handy tool to help you analyze malware. You can use this tool to query your malware samples using different hashes or find all oth…☆20Jul 22, 2025Updated 6 months ago
- ADXFlowmaster helps SecOps teams Threat Hunt suspicious network traffic inside & outside of Azure.☆40Oct 30, 2024Updated last year
- A config file that's curated for DFIR examiners with shortcuts to common Windows artifacts and settings enabled that help make your life …☆39Jan 6, 2025Updated last year
- Lateral Movement and Data Access artifacts for Velociraptor☆17Dec 2, 2025Updated 2 months ago
- Python script to run battery of Volatility plugins against a forensic memory image☆10Jun 22, 2019Updated 6 years ago
- A package that get baseball data☆13Feb 24, 2025Updated 11 months ago
- ☆13Dec 14, 2021Updated 4 years ago
- GUI for regripper☆11Mar 19, 2019Updated 6 years ago
- ☆11Dec 9, 2025Updated 2 months ago
- Plugin that serves the ATT&CK website alongside CALDERA.☆12Feb 24, 2020Updated 5 years ago
- Splunk Searches and Dashboards for DNS Threat Hunting☆10Mar 5, 2018Updated 7 years ago
- A Python IDA Plugin that finds a route from one function to another.☆12Dec 6, 2018Updated 7 years ago
- Volatility plugin to search for all Autostart Extensibility Points (AESPs)☆10May 16, 2024Updated last year
- ArtixLinux Mirror Optimizer | selects fastest mirror in mirrors based on ping ms☆12Oct 28, 2025Updated 3 months ago