volatilityfoundation / volatility3Links
Volatility 3.0 development
☆3,873Updated last week
Alternatives and similar repositories for volatility3
Users that are interested in volatility3 are comparing it to the libraries listed below
Sorting:
- An advanced memory forensics framework☆7,957Updated 8 months ago
- Please no pull requests for this repository. Thanks!☆2,401Updated 3 weeks ago
- Living Off The Land Binaries And Scripts - (LOLBins and LOLScripts)☆8,300Updated 2 months ago
- Malware Configuration And Payload Extraction☆2,975Updated last week
- FLARE Obfuscated String Solver - Automatically extract obfuscated strings from malware.☆3,865Updated this week
- Digging Deeper....☆3,726Updated last week
- oletools - python tools to analyze MS OLE2 files (Structured Storage, Compound File Binary Format) and MS Office documents, for malware a…☆3,274Updated last week
- A collection of software installations scripts for Windows systems that allows you to easily setup and maintain a reverse engineering env…☆8,319Updated last month
- A curated list of awesome YARA rules, tools, and people.☆4,130Updated 10 months ago
- ☆2,306Updated last year
- FakeNet-NG - Next Generation Dynamic Network Analysis Tool☆2,071Updated last month
- Red Teaming Tactics and Techniques☆4,482Updated last year
- Educational, CTF-styled labs for individuals interested in Memory Forensics☆1,827Updated 4 years ago
- Rapidly Search and Hunt through Windows Forensic Artefacts☆3,438Updated 3 months ago
- Windows Exploit Suggester - Next Generation☆4,750Updated last week
- Repository of yara rules☆4,697Updated last year
- Empire is a post-exploitation and adversary emulation framework that is used to aid Red Teams and Penetration Testers.☆5,025Updated last week
- Loki - Simple IOC and YARA Scanner☆3,715Updated 3 weeks ago
- Interesting APT Report Collection And Some Special IOCs☆2,887Updated this week
- The FLARE team's open-source tool to identify capabilities in executable files.☆5,813Updated this week
- A collaborative, multi-platform, red teaming framework☆4,281Updated this week
- Responder is a LLMNR, NBT-NS and MDNS poisoner, with built-in HTTP/SMB/MSSQL/FTP/LDAP rogue authentication server supporting NTLMv1/NTLMv…☆6,297Updated last week
- Trying to tame the three-headed dog.☆4,862Updated 2 months ago
- Linux privilege escalation auditing tool☆6,375Updated last year
- Malwoverview is a rapid response tool used to gather intelligence information from VirusTotal, Hybrid Analysis, URLHaus, Polyswarm, Malsh…☆3,523Updated 2 weeks ago
- Complete Mandiant Offensive VM (Commando VM), a fully customizable Windows-based pentesting virtual machine distribution. commandovm@mand…☆7,523Updated 3 months ago
- The ultimate WinRM shell for hacking/pentesting☆5,237Updated 3 weeks ago
- An open library of adversary emulation plans designed to empower organizations to test their defenses based on real-world TTPs.☆2,068Updated 8 months ago
- Small and highly portable detection tests based on MITRE's ATT&CK.☆11,554Updated 2 weeks ago
- Automated Adversary Emulation Platform☆6,717Updated this week