Automated Memory Forensic
☆34Jul 18, 2018Updated 7 years ago
Alternatives and similar repositories for aumfor
Users that are interested in aumfor are comparing it to the libraries listed below. We may earn a commission when you buy through links labeled 'Ad' on this page.
Sorting:
- A simple utility for stripping out either the SHA-1, MD5 or CRC values alone from the NSRL hash database☆14Nov 19, 2021Updated 4 years ago
- MacOS incident Response Toolkit. Mostly written while stuck on a NJTransit train.☆20Feb 20, 2020Updated 6 years ago
- geolocate ip addresses in IIS logs☆21May 10, 2026Updated last month
- Registry to JSON. This Project is for learning purposes and is not maintained.☆12Dec 28, 2021Updated 4 years ago
- Quick module to deploy a Linux VM to Azure with Ansible installed at bootup - by @JesseLoudon☆11Apr 4, 2026Updated 2 months ago
- AI Agents on DigitalOcean Gradient AI Platform • AdBuild production-ready AI agents using customizable tools or access multiple LLMs through a single endpoint. Create custom knowledge bases or connect external data.
- Vulnerability Assessment and Penetration Testing Toolkit☆18Jan 5, 2022Updated 4 years ago
- ☆11Jun 18, 2020Updated 5 years ago
- FileSigExtractor is a python based tool which extracts the file signatures of all files within a directory and writes the output to a CSV…☆10Jul 15, 2023Updated 2 years ago
- Log Examination Tool☆27Oct 11, 2016Updated 9 years ago
- A repository to host emojis used in the Digital Forensics Discord Server☆18May 28, 2022Updated 4 years ago
- Web interface for the Volatility Memory Forensics Framework☆259Nov 21, 2017Updated 8 years ago
- Reconstruct process trees from event logs☆148Aug 12, 2020Updated 5 years ago
- Carve NTFS USN records from binary data☆27May 21, 2017Updated 9 years ago
- A tool to automate memory dump processing using Volatility, including optional Splunk integration.☆11Jul 29, 2020Updated 5 years ago
- GPUs on demand by Runpod - Special Offer Available • AdRun AI, ML, and HPC workloads on powerful cloud GPUs—without limits or wasted spend. Deploy GPUs in under a minute and pay by the second.
- Automated forensics written in PowerShell☆34Sep 29, 2019Updated 6 years ago
- Web App for Volatility framework☆386Jan 13, 2026Updated 4 months ago
- My Year of Python Repository☆28Jun 13, 2020Updated 5 years ago
- Automagically extract forensic timeline from volatile memory dump☆133Mar 5, 2026Updated 3 months ago
- VolatilityBot – An automated memory analyzer for malware samples and memory dumps☆268Jun 15, 2021Updated 4 years ago
- GUI for regripper☆11Mar 19, 2019Updated 7 years ago
- Library and tools to access the Windows SuperFetch database format☆13May 31, 2026Updated last week
- Konrads' Pen-Ultimate (Windows) Log File Parser☆14Dec 27, 2025Updated 5 months ago
- Term concordances for each course in the SANS DFIR curriculum. Used for automated index generation.☆69Aug 7, 2020Updated 5 years ago
- GPU virtual machines on DigitalOcean Gradient AI • AdGet to production fast with high-performance AMD and NVIDIA GPUs you can spin up in seconds. The definition of operational simplicity.
- OS Lockdown☆13Nov 21, 2017Updated 8 years ago
- GeoLogonalyzer is a utility to analyze remote access logs for anomalies such as travel feasibility and data center sources.☆197Aug 12, 2024Updated last year
- Training materials I've written.☆11Nov 11, 2025Updated 6 months ago
- PowerShell script useful for Incident Response and security/configuration baselines for Windows Vista and later☆20Feb 23, 2016Updated 10 years ago
- Scandiff is a PowerShell script to automate host discovery and scanning with nmap. After discovering and scanning hosts, scandiff perfor…☆19Oct 29, 2014Updated 11 years ago
- Tools for DFIR☆123Jan 25, 2018Updated 8 years ago
- Python script to walk a folder or a zip file for SQLite Databases☆37Sep 20, 2023Updated 2 years ago
- Automatic/Custom Destinations & LNK (MS-SHLLINK) Browser☆48Jun 3, 2026Updated last week
- 1-Click push forensics evidence to the cloud☆143Mar 18, 2026Updated 2 months ago
- Deploy on Railway without the complexity - Free Credits Offer • AdConnect your repo and Railway handles the rest with instant previews. Quickly provision container image services, databases, and storage volumes.
- Technical add-on to ingest json formatted volatility memory analysis plugin outputs☆13May 21, 2018Updated 8 years ago
- ☆68Jun 21, 2017Updated 8 years ago
- Comae Hibernation File Decompressor☆158Apr 1, 2023Updated 3 years ago
- Ponmocup Indicators of Compromise☆10Feb 4, 2016Updated 10 years ago
- EVTXtract recovers and reconstructs fragments of EVTX log files from raw binary data, including unallocated space and memory images.☆211Mar 12, 2025Updated last year
- Splunk App to assist Sysmon Threat Hunting☆38Mar 7, 2017Updated 9 years ago
- "Evolving AppCompat/AmCache data analysis beyond grep"☆212Sep 15, 2021Updated 4 years ago