Alternatives and similar repositories for community3:

Users that are interested in community3 are comparing it to the libraries listed below

• memoryforensics1 / VolExp
  volatility explorer
  ☆91Updated 4 years ago
• JPCERTCC / Windows-Symbol-Tables
  Windows symbol tables for Volatility 3
  ☆78Updated 6 months ago
• 3c7 / bazaar
  Python based CLI for MalwareBazaar
  ☆36Updated 2 months ago
• knez / defender-dump
  Dump quarantined files from Windows Defender
  ☆56Updated 2 years ago
• fox-it / skrapa
  A zero dependency and customizable Python library for scanning Windows and Linux process memory.
  ☆64Updated 11 months ago
• Neo23x0 / yaraQA
  YARA rule analyzer to improve rule quality and performance
  ☆95Updated 3 weeks ago
• fr0gger / MalwareMuncher
  Malware Muncher is a proof-of-concept Python script that utilizes the Frida framework for binary instrumentation and API hooking, enablin…
  ☆42Updated last year
• kevthehermit / volatility_symbols
  Volatility Symbol Generator for Linux Kernels
  ☆32Updated last year
• CIRCL / factual-rules-generator
  Factual-rules-generator is an open source project which aims to generate YARA rules about installed software from a machine.
  ☆76Updated 3 years ago
• jschicht / SetMace
  Manipulate timestamps on NTFS
  ☆50Updated 10 years ago
• 0x534a / dynmx
  Signature-based detection of malware features based on Windows API call sequences. It's like YARA for sandbox API traces!
  ☆82Updated last year
• g-les / 100DaysofYARA
  100 Days of YARA to be updated with rules & ideas as the year progresses
  ☆57Updated 2 years ago
• embee-research / Yara-detection-rules
  Yara Rules for Modern Malware
  ☆73Updated 10 months ago
• NextronSystems / evtx-baseline
  A repository hosting example goodware evtx logs containing sample software installation and basic user interaction
  ☆73Updated last year
• breppo / Volatility-BitLocker
  Volatility plugin to retrieve the Full Volume Encryption Key in memory. The FVEK can then be used with the help of Dislocker to mount the…
  ☆35Updated 4 years ago
• gajos112 / Digital-Forensics
  ☆37Updated 3 years ago
• jstrosch / subparse
  Modular malware analysis artifact collection and correlation framework
  ☆53Updated 8 months ago
• forensicxlab / volatility3_plugins
  ☆22Updated 5 months ago
• harelsegev / prefetch-hash-cracker
  A small util to brute-force prefetch hashes
  ☆76Updated 2 years ago
• ForensicArtifacts / artifacts-kb
  Digital Forensics Artifacts Knowledge Base
  ☆76Updated 8 months ago
• knight0x07 / OneNoteAnalyzer
  A C# based tool for analysing malicious OneNote documents
  ☆109Updated last year
• mandiant / gootloader
  Collection of scripts used to deobfuscate GOOTLOADER malware samples.
  ☆58Updated 3 weeks ago
• herosi / triage-collector
  ☆21Updated 3 months ago
• 100DaysofYARA / 2023
  Rules Shared by the Community from 100 Days of YARA 2023
  ☆77Updated last year
• harelsegev / INDXRipper
  Carve file metadata from NTFS index ($I30) attributes
  ☆62Updated 11 months ago
• stairwell-inc / cobalt-strike-stager-parser
  ☆34Updated 2 years ago
• elastic / labs-releases
  Elastic Security Labs releases
  ☆55Updated 2 months ago
• mnrkbys / ma2tl
  macOS forensic timeline generator using the analysis result DBs of mac_apt
  ☆89Updated last year
• JPCERTCC / jpcert-yara
  JPCERT/CC public YARA rules repository
  ☆106Updated last month
• splunk / melting-cobalt
  A Cobalt Strike Scanner that retrieves detected Team Server beacons into a JSON object
  ☆164Updated 2 years ago