Alternatives and similar repositories for volatility3

Users that are interested in volatility3 are comparing it to the libraries listed below

• volatilityfoundation / volatility
  An advanced memory forensics framework
  ☆7,910Updated 6 months ago
• mandiant / flare-floss
  FLARE Obfuscated String Solver - Automatically extract obfuscated strings from malware.
  ☆3,799Updated last week
• LOLBAS-Project / LOLBAS
  Living Off The Land Binaries And Scripts - (LOLBins and LOLScripts)
  ☆8,176Updated this week
• kevoreilly / CAPEv2
  Malware Configuration And Payload Extraction
  ☆2,834Updated last week
• mandiant / flare-vm
  A collection of software installations scripts for Windows systems that allows you to easily setup and maintain a reverse engineering env…
  ☆8,077Updated 2 months ago
• DidierStevens / DidierStevensSuite
  Please no pull requests for this repository. Thanks!
  ☆2,369Updated 3 weeks ago
• WithSecureLabs / chainsaw
  Rapidly Search and Hunt through Windows Forensic Artefacts
  ☆3,387Updated last month
• InQuest / awesome-yara
  A curated list of awesome YARA rules, tools, and people.
  ☆4,094Updated 8 months ago
• Yara-Rules / rules
  Repository of yara rules
  ☆4,614Updated last year
• decalage2 / oletools
  oletools - python tools to analyze MS OLE2 files (Structured Storage, Compound File Binary Format) and MS Office documents, for malware a…
  ☆3,236Updated 6 months ago
• stuxnet999 / MemLabs
  Educational, CTF-styled labs for individuals interested in Memory Forensics
  ☆1,799Updated 4 years ago
• Neo23x0 / yarGen
  yarGen is a generator for YARA rules
  ☆1,751Updated 2 months ago
• lgandx / Responder
  Responder is a LLMNR, NBT-NS and MDNS poisoner, with built-in HTTP/SMB/MSSQL/FTP/LDAP rogue authentication server supporting NTLMv1/NTLMv…
  ☆6,158Updated this week
• mandiant / flare-fakenet-ng
  FakeNet-NG - Next Generation Dynamic Network Analysis Tool
  ☆2,039Updated last month
• mandiant / capa
  The FLARE team's open-source tool to identify capabilities in executable files.
  ☆5,687Updated this week
• ParrotSec / mimikatz
  ☆2,195Updated last year
• Velocidex / velociraptor
  Digging Deeper....
  ☆3,612Updated last week
• Neo23x0 / Loki
  Loki - Simple IOC and YARA Scanner
  ☆3,694Updated last month
• BC-SECURITY / Empire
  Empire is a post-exploitation and adversary emulation framework that is used to aid Red Teams and Penetration Testers.
  ☆4,929Updated 3 months ago
• Neo23x0 / signature-base
  YARA signature and IOC database for my scanners and tools
  ☆2,816Updated this week
• mantvydasb / RedTeaming-Tactics-and-Techniques
  Red Teaming Tactics and Techniques
  ☆4,435Updated last year
• mitre / caldera
  Automated Adversary Emulation Platform
  ☆6,593Updated last week
• mandiant / commando-vm
  Complete Mandiant Offensive VM (Commando VM), a fully customizable Windows-based pentesting virtual machine distribution. commandovm@mand…
  ☆7,425Updated last month
• JPCERTCC / LogonTracer
  Investigate malicious Windows logon by visualizing and analyzing Windows event log
  ☆3,022Updated last month
• GhostPack / Rubeus
  Trying to tame the three-headed dog.
  ☆4,763Updated 3 weeks ago
• its-a-feature / Mythic
  A collaborative, multi-platform, red teaming framework
  ☆4,152Updated 2 weeks ago
• VirusTotal / yara
  The pattern matching swiss knife
  ☆9,251Updated 2 weeks ago
• Yamato-Security / hayabusa
  Hayabusa (隼) is a sigma-based threat hunting and fast forensics timeline generator for Windows event logs.
  ☆2,954Updated last week
• center-for-threat-informed-defense / adversary_emulation_library
  An open library of adversary emulation plans designed to empower organizations to test their defenses based on real-world TTPs.
  ☆2,038Updated 6 months ago
• alexandreborges / malwoverview
  Malwoverview is a first response tool used for threat hunting and offers intel information from Virus Total, Hybrid Analysis, URLHaus, Po…
  ☆3,469Updated last month