Alternatives and similar repositories for volatility3

Users that are interested in volatility3 are comparing it to the libraries listed below

• volatilityfoundation / volatility
  An advanced memory forensics framework
  ☆7,772Updated 2 months ago
• DidierStevens / DidierStevensSuite
  Please no pull requests for this repository. Thanks!
  ☆2,277Updated last month
• mandiant / flare-floss
  FLARE Obfuscated String Solver - Automatically extract obfuscated strings from malware.
  ☆3,618Updated this week
• kevoreilly / CAPEv2
  Malware Configuration And Payload Extraction
  ☆2,570Updated last week
• Yara-Rules / rules
  Repository of yara rules
  ☆4,472Updated last year
• InQuest / awesome-yara
  A curated list of awesome YARA rules, tools, and people.
  ☆3,895Updated 4 months ago
• decalage2 / oletools
  oletools - python tools to analyze MS OLE2 files (Structured Storage, Compound File Binary Format) and MS Office documents, for malware a…
  ☆3,132Updated 2 months ago
• LOLBAS-Project / LOLBAS
  Living Off The Land Binaries And Scripts - (LOLBins and LOLScripts)
  ☆7,820Updated 2 weeks ago
• WithSecureLabs / chainsaw
  Rapidly Search and Hunt through Windows Forensic Artefacts
  ☆3,227Updated last month
• mandiant / flare-vm
  A collection of software installations scripts for Windows systems that allows you to easily setup and maintain a reverse engineering env…
  ☆7,565Updated this week
• Velocidex / velociraptor
  Digging Deeper....
  ☆3,374Updated this week
• Neo23x0 / Loki
  Loki - Simple IOC and YARA Scanner
  ☆3,602Updated 8 months ago
• mandiant / flare-fakenet-ng
  FakeNet-NG - Next Generation Dynamic Network Analysis Tool
  ☆1,972Updated 3 months ago
• alexandreborges / malwoverview
  Malwoverview is a first response tool used for threat hunting and offers intel information from Virus Total, Hybrid Analysis, URLHaus, Po…
  ☆3,329Updated last week
• BC-SECURITY / Empire
  Empire is a post-exploitation and adversary emulation framework that is used to aid Red Teams and Penetration Testers.
  ☆4,763Updated 3 weeks ago
• mandiant / capa
  The FLARE team's open-source tool to identify capabilities in executable files.
  ☆5,438Updated 2 weeks ago
• Neo23x0 / yarGen
  yarGen is a generator for YARA rules
  ☆1,677Updated 4 months ago
• ParrotSec / mimikatz
  ☆1,943Updated last year
• lgandx / Responder
  Responder is a LLMNR, NBT-NS and MDNS poisoner, with built-in HTTP/SMB/MSSQL/FTP/LDAP rogue authentication server supporting NTLMv1/NTLMv…
  ☆5,949Updated 2 months ago
• VirusTotal / yara
  The pattern matching swiss knife
  ☆8,977Updated this week
• Neo23x0 / signature-base
  YARA signature and IOC database for my scanners and tools
  ☆2,704Updated last week
• Yamato-Security / hayabusa
  Hayabusa (隼) is a sigma-based threat hunting and fast forensics timeline generator for Windows event logs.
  ☆2,749Updated last week
• stuxnet999 / MemLabs
  Educational, CTF-styled labs for individuals interested in Memory Forensics
  ☆1,743Updated 4 years ago
• mattnotmax / cyberchef-recipes
  A list of cyber-chef recipes and curated links
  ☆2,121Updated last year
• GhostPack / Rubeus
  Trying to tame the three-headed dog.
  ☆4,584Updated 2 weeks ago
• mikesiko / PracticalMalwareAnalysis-Labs
  Binaries for the book Practical Malware Analysis
  ☆1,315Updated 3 years ago
• blackorbird / APT_REPORT
  Interesting APT Report Collection And Some Special IOCs
  ☆2,638Updated this week
• mantvydasb / RedTeaming-Tactics-and-Techniques
  Red Teaming Tactics and Techniques
  ☆4,334Updated 11 months ago
• Velocidex / WinPmem
  The multi-platform memory acquisition tool.
  ☆818Updated last month
• JPCERTCC / LogonTracer
  Investigate malicious Windows logon by visualizing and analyzing Windows event log
  ☆2,961Updated last year