volatilityfoundation / volatility3Links
Volatility 3.0 development
☆3,550Updated last week
Alternatives and similar repositories for volatility3
Users that are interested in volatility3 are comparing it to the libraries listed below
Sorting:
- An advanced memory forensics framework☆7,834Updated 4 months ago
- Please no pull requests for this repository. Thanks!☆2,314Updated 2 weeks ago
- Malware Configuration And Payload Extraction☆2,706Updated this week
- FLARE Obfuscated String Solver - Automatically extract obfuscated strings from malware.☆3,719Updated 2 weeks ago
- Living Off The Land Binaries And Scripts - (LOLBins and LOLScripts)☆7,983Updated last week
- Rapidly Search and Hunt through Windows Forensic Artefacts☆3,307Updated last month
- A collection of software installations scripts for Windows systems that allows you to easily setup and maintain a reverse engineering env…☆7,821Updated 3 weeks ago
- Educational, CTF-styled labs for individuals interested in Memory Forensics☆1,774Updated 4 years ago
- Digging Deeper....☆3,473Updated this week
- The FLARE team's open-source tool to identify capabilities in executable files.☆5,539Updated last week
- A curated list of awesome YARA rules, tools, and people.☆4,017Updated 6 months ago
- oletools - python tools to analyze MS OLE2 files (Structured Storage, Compound File Binary Format) and MS Office documents, for malware a…☆3,188Updated 4 months ago
- ☆2,073Updated last year
- Loki - Simple IOC and YARA Scanner☆3,647Updated last month
- Repository of yara rules☆4,546Updated last year
- Hayabusa (隼) is a sigma-based threat hunting and fast forensics timeline generator for Windows event logs.☆2,857Updated 2 weeks ago
- Empire is a post-exploitation and adversary emulation framework that is used to aid Red Teams and Penetration Testers.☆4,855Updated last month
- Malwoverview is a first response tool used for threat hunting and offers intel information from Virus Total, Hybrid Analysis, URLHaus, Po…☆3,424Updated 2 months ago
- Automated Adversary Emulation Platform☆6,462Updated this week
- An open library of adversary emulation plans designed to empower organizations to test their defenses based on real-world TTPs.☆1,998Updated 4 months ago
- FakeNet-NG - Next Generation Dynamic Network Analysis Tool☆2,006Updated last month
- Investigate malicious Windows logon by visualizing and analyzing Windows event log☆2,997Updated last month
- Responder is a LLMNR, NBT-NS and MDNS poisoner, with built-in HTTP/SMB/MSSQL/FTP/LDAP rogue authentication server supporting NTLMv1/NTLMv…☆6,067Updated last month
- YARA signature and IOC database for my scanners and tools☆2,758Updated last week
- A collaborative, multi-platform, red teaming framework☆4,011Updated last week
- The ultimate WinRM shell for hacking/pentesting☆5,044Updated 2 weeks ago
- The multi-platform memory acquisition tool.☆849Updated 3 months ago
- yarGen is a generator for YARA rules☆1,719Updated 6 months ago
- Mimikatz implementation in pure Python☆3,145Updated 3 weeks ago
- Trying to tame the three-headed dog.☆4,673Updated last month