Awesome Open Source

Programming Languages

Search results for memory forensics

memory-forensics x

29 search results found

Pe Sieve ⭐ 2,874

Scans a given process. Recognizes and dumps a variety of potentially malicious implants (replaced/injected PEs, shellcodes, hooks, in-memory patches).

Hollows_hunter ⭐ 1,743

Scans all running processes. Recognizes and dumps a variety of potentially malicious implants (replaced/implanted PEs, shellcodes, hooks, in-memory patches).

AVML - Acquire Volatile Memory for Linux

Memlabs ⭐ 689

Educational, CTF-styled labs for individuals interested in Memory Forensics

Mal_unpack ⭐ 572

Dynamic unpacker based on PE-sieve

Wdbgark ⭐ 412

WinDBG Anti-RootKit Extension

Memprocfs Analyzer ⭐ 358

MemProcFS-Analyzer - Automated Forensic Analysis of Windows Memory Dumps for DFIR

Idacyber ⭐ 285

Data Visualization Plugin for IDA Pro

Volatile Artifact Collector collects a snapshot of volatile data from a system. It tells you what is happening on a system, and is of particular use when investigating a security incident.

Collect Memorydump ⭐ 186

Collect-MemoryDump - Automated Creation of Windows Memory Snapshots for DFIR

Memtriage ⭐ 180

Allows you to quickly query a Windows machine for RAM artifacts

Livecloudkd ⭐ 149

Hyper-V Research is trendy now

A Course On Digital Forensics ⭐ 147

A course on "Digital Forensics" designed and offered in the Computer Science Department at Texas Tech University

Hibr2bin ⭐ 132

Comae Hibernation File Decompressor

A short and small memory forensics helper.

Calamity ⭐ 28

A script to assist in processing forensic RAM captures for malware triage

Volatility Plugin Tutorial ⭐ 23

Development guide for Volatility Plugins

Kallsyms Extractor ⭐ 20

Tool to extract the kallsyms (System.map) from a memory dump

Smartvmi ⭐ 18

Virtual Machine Introspection (VMI) for memory forensics and machine-learning.

Volatility Plugins ⭐ 17

Learning volatility plugins.

Volatility Docker ⭐ 15

A suite of Volatility 3 plugins for memory forensics of Docker containers

Libforensic1394 ⭐ 13

A library for performing memory forensics over the IEEE 1394 interface.

Ansible Volatility ⭐ 10

An Ansible role for deploying the Volatility memory forensics framework.

Forensic1394 ⭐ 9

Clone of the forensic1394 library from https://freddie.witherden.org/tools/libforensic139

Dfrws Usa 2019 ⭐ 8

Volatility Runner ⭐ 6

volatility-runner is a command line application designed to speed up memory forensics using the volatility framework, primarily for instances where the user has multiple memory dumps to analyse.

Volatility Profiles ⭐ 5

My Linux profiles built for Volatility 2/3

Windows Memory Extractor ⭐ 5

Tool to extract contents from the memory of Windows systems.

Related Searches

Python Memory Forensics (16)

Volatility Memory Forensics (10)

C Memory Forensics (8)

Malware Memory Forensics (8)

Dfir Memory Forensics (8)

Malware Analysis Memory Forensics (7)

Plugin Memory Forensics (5)

C Plus Plus Memory Forensics (4)

Memory Forensics Volatility Plugins (4)

Memory Forensics Volatility3 (4)

1-29 of 29 search results

Privacy | About | Terms | Follow Us On Twitter

Copyright 2018-2024 Awesome Open Source. All rights reserved.