Alternatives and similar repositories for volatility3

Users that are interested in volatility3 are comparing it to the libraries listed below

• volatilityfoundation / volatility
  An advanced memory forensics framework
  ☆7,943Updated 8 months ago
• mandiant / flare-floss
  FLARE Obfuscated String Solver - Automatically extract obfuscated strings from malware.
  ☆3,832Updated last week
• DidierStevens / DidierStevensSuite
  Please no pull requests for this repository. Thanks!
  ☆2,386Updated last month
• kevoreilly / CAPEv2
  Malware Configuration And Payload Extraction
  ☆2,934Updated this week
• InQuest / awesome-yara
  A curated list of awesome YARA rules, tools, and people.
  ☆4,124Updated 9 months ago
• Yara-Rules / rules
  Repository of yara rules
  ☆4,670Updated last year
• mandiant / capa
  The FLARE team's open-source tool to identify capabilities in executable files.
  ☆5,752Updated this week
• mandiant / flare-vm
  A collection of software installations scripts for Windows systems that allows you to easily setup and maintain a reverse engineering env…
  ☆8,234Updated 3 weeks ago
• decalage2 / oletools
  oletools - python tools to analyze MS OLE2 files (Structured Storage, Compound File Binary Format) and MS Office documents, for malware a…
  ☆3,261Updated 7 months ago
• LOLBAS-Project / LOLBAS
  Living Off The Land Binaries And Scripts - (LOLBins and LOLScripts)
  ☆8,257Updated last month
• Velocidex / velociraptor
  Digging Deeper....
  ☆3,689Updated this week
• alexandreborges / malwoverview
  Malwoverview is a first response tool used for threat hunting and offers intel information from Virus Total, Hybrid Analysis, URLHaus, Po…
  ☆3,496Updated 2 months ago
• WithSecureLabs / chainsaw
  Rapidly Search and Hunt through Windows Forensic Artefacts
  ☆3,424Updated 3 months ago
• Neo23x0 / Loki
  Loki - Simple IOC and YARA Scanner
  ☆3,705Updated last week
• stuxnet999 / MemLabs
  Educational, CTF-styled labs for individuals interested in Memory Forensics
  ☆1,823Updated 4 years ago
• Neo23x0 / signature-base
  YARA signature and IOC database for my scanners and tools
  ☆2,845Updated 2 weeks ago
• 504ensicsLabs / LiME
  LiME (formerly DMD) is a Loadable Kernel Module (LKM), which allows the acquisition of volatile memory from Linux and Linux-based devices…
  ☆1,924Updated 2 months ago
• mandiant / flare-fakenet-ng
  FakeNet-NG - Next Generation Dynamic Network Analysis Tool
  ☆2,052Updated last month
• sleuthkit / autopsy
  Autopsy® is a digital forensics platform and graphical interface to The Sleuth Kit® and other digital forensics tools. It can be used by …
  ☆2,957Updated 2 months ago
• ParrotSec / mimikatz
  ☆2,277Updated last year
• VirusTotal / yara
  The pattern matching swiss knife
  ☆9,336Updated last month
• BC-SECURITY / Empire
  Empire is a post-exploitation and adversary emulation framework that is used to aid Red Teams and Penetration Testers.
  ☆4,996Updated this week
• zed-0xff / zsteg
  detect stegano-hidden data in PNG & BMP
  ☆1,535Updated 5 months ago
• blackorbird / APT_REPORT
  Interesting APT Report Collection And Some Special IOCs
  ☆2,853Updated last week
• Neo23x0 / yarGen
  yarGen is a generator for YARA rules
  ☆1,770Updated last week
• redcanaryco / atomic-red-team
  Small and highly portable detection tests based on MITRE's ATT&CK.
  ☆11,469Updated last week
• center-for-threat-informed-defense / adversary_emulation_library
  An open library of adversary emulation plans designed to empower organizations to test their defenses based on real-world TTPs.
  ☆2,052Updated 7 months ago
• mattnotmax / cyberchef-recipes
  A list of cyber-chef recipes and curated links
  ☆2,176Updated last year
• skelsec / pypykatz
  Mimikatz implementation in pure Python
  ☆3,228Updated 2 weeks ago
• CyberMonitor / APT_CyberCriminal_Campagin_Collections
  APT & CyberCriminal Campaign Collection
  ☆4,036Updated last year