Generate Volatility3 profiles from BTF.
☆38Dec 21, 2024Updated last year
Alternatives and similar repositories for btf2json
Users that are interested in btf2json are comparing it to the libraries listed below. We may earn a commission when you buy through links labeled 'Ad' on this page.
Sorting:
- Linux BPF plugins for Volatility3☆23Jan 19, 2024Updated 2 years ago
- A curated list of ressources for Volatility 2 & 3☆14Mar 17, 2024Updated 2 years ago
- Windows symbol tables for Volatility 3☆100Jul 11, 2024Updated 2 years ago
- Volatility plugin to deal with windows kerberos security provider, list, carve and dump Tickets☆27Jan 21, 2026Updated 9 months ago
- Volatility Symbol Generator for Linux Kernels☆37Nov 15, 2023Updated 2 years ago
- Managed Kubernetes at scale on DigitalOcean • AdDigitalOcean Kubernetes includes the control plane, bandwidth allowance, container registry, automatic updates, and more for free.
- Volumetric Development☆11Mar 19, 2024Updated 2 years ago
- Walk any memory dump. Find what's hidden. Linux + Windows kernel forensics from a single static Rust binary — no Python required.☆12Aug 20, 2026Updated 2 months ago
- Yet another fseventsd parser for macOS forensics☆13Jul 20, 2024Updated 2 years ago
- Collection of Volatility2 profiles, generated against Linux kernels.☆56Oct 30, 2025Updated last year
- Volatility3 Linux profiles☆83Oct 10, 2026Updated 2 weeks ago
- ETW forensic tool for Volatility3 plugin☆17Nov 15, 2024Updated last year
- ☆26Apr 22, 2025Updated last year
- This tool aims at parsing Microsoft Protection logs to provide relevant data to forensic analysts during incident responses.☆22Sep 30, 2022Updated 4 years ago
- Semantic strings based on tree-sitter☆17Feb 19, 2025Updated last year
- Serverless GPU API endpoints on Runpod - Get Bonus Credits • AdSkip the infrastructure headaches. Auto-scaling, pay-as-you-go, no-ops approach lets you focus on innovating your application.
- Reproducible forensics environment, 100% of the time☆12Aug 5, 2024Updated 2 years ago
- Port of tomchop's autoruns plugin for Volatility 3☆10Apr 27, 2022Updated 4 years ago
- My Linux profiles built for Volatility 2/3☆11Oct 11, 2025Updated last year
- ☆27Oct 18, 2026Updated last week
- Linux Memory Forensics Framework That Transforms Memory Dumps Into a Navigable Filesystem☆210Oct 11, 2026Updated 2 weeks ago
- This repository contains a variety of plugins and scripts, related to the Volatility framework.☆19Feb 9, 2025Updated last year
- ☆16Jun 16, 2026Updated 4 months ago
- Mount forensic disk images, archives & memory dumps as a filesystem on Linux/macOS/Windows — ext4/NTFS/exFAT/HFS+/APFS/ISO, EWF/VMDK/AFF4…☆10Sep 20, 2026Updated last month
- SACTI - Securely aggregate CTI sightings and report them on MISP☆14Oct 24, 2022Updated 4 years ago
- Managed hosting for WordPress and PHP on Cloudways • AdManaged hosting for WordPress, Magento, Laravel, or PHP apps, on multiple cloud providers. Deploy in minutes on Cloudways by DigitalOcean.
- $I30 INDX Carver☆18Jun 23, 2025Updated last year
- Linux #rootkit and #malware revealer☆31Aug 1, 2024Updated 2 years ago
- Zero-dependency Linux memory forensics, leveraging kernel-embedded BTF and kallsyms for type-aware memory analysis without external debug…☆192Updated this week
- Rust-based Fast Forensics Tool for Windows☆15Aug 9, 2026Updated 2 months ago
- convert ELF/DWARF symbol and type information into vol3's intermediate JSON☆159Oct 9, 2024Updated 2 years ago
- DeepProbe - Memory Forensics Framework☆16May 16, 2026Updated 5 months ago
- A modular PCAP forensics tool☆16Updated this week
- CryptnetURLCacheParser is a tool to parse CryptAPI cache files☆24Aug 3, 2024Updated 2 years ago
- A collection of content for blue team professionals, designed to support both reactive and proactive cybersecurity measures of every aspe…☆35Apr 2, 2026Updated 6 months ago
- Deploy on Railway without the complexity - Free Credits Offer • AdConnect your repo and Railway handles the rest with instant previews. Quickly provision container image services, databases, and storage volumes.
- Decrypt VMware vTPM-encrypted .vmem/.vmsn/.vmss/.nvram from the VM password, and flatten the .vmem to a Volatility-ready image.☆55Jul 4, 2026Updated 3 months ago
- Parser for Sdba memory pool tags☆20Jul 16, 2021Updated 5 years ago
- Neural network RDP cache reconstruction tool☆36May 21, 2026Updated 5 months ago
- USN Journal full path builder☆71Apr 16, 2026Updated 6 months ago
- A library to parse macOS FsEvents☆27Aug 28, 2022Updated 4 years ago
- A suite of Volatility 3 plugins for memory forensics of Docker containers☆19Jan 10, 2024Updated 2 years ago
- 2024 DFC winner writeup☆11Mar 5, 2026Updated 7 months ago