Alternatives and similar repositories for volatility3

Users that are interested in volatility3 are comparing it to the libraries listed below

• volatilityfoundation / volatility
  An advanced memory forensics framework
  ☆7,672Updated last year
• mandiant / flare-vm
  A collection of software installations scripts for Windows systems that allows you to easily setup and maintain a reverse engineering env…
  ☆7,241Updated 2 weeks ago
• decalage2 / oletools
  oletools - python tools to analyze MS OLE2 files (Structured Storage, Compound File Binary Format) and MS Office documents, for malware a…
  ☆3,056Updated 3 weeks ago
• Yara-Rules / rules
  Repository of yara rules
  ☆4,390Updated last year
• mandiant / flare-floss
  FLARE Obfuscated String Solver - Automatically extract obfuscated strings from malware.
  ☆3,521Updated this week
• alexandreborges / malwoverview
  Malwoverview is a first response tool used for threat hunting and offers intel information from Virus Total, Hybrid Analysis, URLHaus, Po…
  ☆3,194Updated 3 months ago
• kevoreilly / CAPEv2
  Malware Configuration And Payload Extraction
  ☆2,411Updated this week
• DidierStevens / DidierStevensSuite
  Please no pull requests for this repository. Thanks!
  ☆2,211Updated last week
• VirusTotal / yara
  The pattern matching swiss knife
  ☆8,758Updated 2 weeks ago
• LOLBAS-Project / LOLBAS
  Living Off The Land Binaries And Scripts - (LOLBins and LOLScripts)
  ☆7,551Updated 2 weeks ago
• Neo23x0 / signature-base
  YARA signature and IOC database for my scanners and tools
  ☆2,619Updated this week
• mandiant / flare-fakenet-ng
  FakeNet-NG - Next Generation Dynamic Network Analysis Tool
  ☆1,911Updated last month
• Velocidex / velociraptor
  Digging Deeper....
  ☆3,252Updated this week
• Neo23x0 / yarGen
  yarGen is a generator for YARA rules
  ☆1,642Updated last month
• InQuest / awesome-yara
  A curated list of awesome YARA rules, tools, and people.
  ☆3,804Updated last month
• mandiant / commando-vm
  Complete Mandiant Offensive VM (Commando VM), a fully customizable Windows-based pentesting virtual machine distribution. commandovm@mand…
  ☆7,200Updated 7 months ago
• skelsec / pypykatz
  Mimikatz implementation in pure Python
  ☆3,020Updated 2 months ago
• lgandx / Responder
  Responder is a LLMNR, NBT-NS and MDNS poisoner, with built-in HTTP/SMB/MSSQL/FTP/LDAP rogue authentication server supporting NTLMv1/NTLMv…
  ☆5,806Updated 2 months ago
• BishopFox / sliver
  Adversary Emulation Framework
  ☆9,312Updated last week
• WithSecureLabs / chainsaw
  Rapidly Search and Hunt through Windows Forensic Artefacts
  ☆3,135Updated 2 weeks ago
• BC-SECURITY / Empire
  Empire is a post-exploitation and adversary emulation framework that is used to aid Red Teams and Penetration Testers.
  ☆4,568Updated 3 weeks ago
• blackorbird / APT_REPORT
  Interesting APT Report Collection And Some Special IOC
  ☆2,551Updated last week
• redcanaryco / atomic-red-team
  Small and highly portable detection tests based on MITRE's ATT&CK.
  ☆10,534Updated this week
• stuxnet999 / MemLabs
  Educational, CTF-styled labs for individuals interested in Memory Forensics
  ☆1,727Updated 4 years ago
• itm4n / PrivescCheck
  Privilege Escalation Enumeration Script for Windows
  ☆3,268Updated last week
• mitre / caldera
  Automated Adversary Emulation Platform
  ☆6,122Updated 3 weeks ago
• bitsadmin / wesng
  Windows Exploit Suggester - Next Generation
  ☆4,433Updated this week
• Neo23x0 / Loki
  Loki - Simple IOC and YARA Scanner
  ☆3,530Updated 5 months ago
• 504ensicsLabs / LiME
  LiME (formerly DMD) is a Loadable Kernel Module (LKM), which allows the acquisition of volatile memory from Linux and Linux-based devices…
  ☆1,811Updated 7 months ago
• ropnop / kerbrute
  A tool to perform Kerberos pre-auth bruteforcing
  ☆2,901Updated 8 months ago