15 results found Sort:

hasherezade
pe-sieve hasherezade
434
3.1k
bsd-2-clause
103
Scans a given process. Recognizes and dumps a variety of potentially malicious implants (replaced/injected PEs, shellcodes, hooks, in-memory patches).
scans hooking pe-sieve libpeconv pe-dumper pe-format pe-analyzer anti-malware malware-analysis memory-forensics process-analyzer
Created 2017-08-22
1,884 commits to master branch, last one 15 days ago
hasherezade
hollows_hunter hasherezade
255
2.0k
bsd-2-clause
66
Scans all running processes. Recognizes and dumps a variety of potentially malicious implants (replaced/implanted PEs, shellcodes, hooks, in-memory patches).
pe-sieve anti-malware malware-analysis memory-forensics malware-detection
Created 2018-01-11
752 commits to master branch, last one 15 days ago
stuxnet999
MemLabs stuxnet999
202
1.7k
mit
47
Educational, CTF-styled labs for individuals interested in Memory Forensics
ctf dfir windows security forensics cybersecurity ctf-challenges memory-forensics digital-forensics
Created 2019-08-22
28 commits to master branch, last one 3 years ago
microsoft
avml microsoft
76
878
mit
32
AVML - Acquire Volatile Memory for Linux
rust linux-security memory-forensics
Created 2019-06-06
443 commits to main branch, last one 19 days ago
hasherezade
mal_unpack hasherezade
68
658
bsd-2-clause
29
Dynamic unpacker based on PE-sieve
pe-sieve libpeconv malware-analysis malware-unpacker memory-forensics
Created 2018-07-08
360 commits to master branch, last one 8 months ago
evild3ad
MemProcFS-Analyzer evild3ad
58
542
gpl-3.0
21
MemProcFS-Analyzer - Automated Forensic Analysis of Windows Memory Dumps for DFIR
dfir memprocfs powershell live-response memory-forensics digital-forensics incident-response
Created 2021-05-15
142 commits to main branch, last one 23 days ago
teamdfir
sift teamdfir
65
492
mit
73
SIFT
aws cli cast sans sift forensics saltstack salt-state cast-distro issues-only memory-forensics timeline-analysis
Created 2014-01-18
31 commits to master branch, last one 9 months ago
patois
IDACyber patois
35
287
mit
22
Data Visualization Plugin for IDA Pro
ida cyber ida-pro pixel-art color-filter exploitation memory-hacking idapython-plugin memory-forensics firmware-analysis data-visualization reverse-engineering
Created 2017-01-12
132 commits to master branch, last one about a year ago
cado-security
varc cado-security
13
252
gpl-3.0
7
Volatile Artifact Collector collects a snapshot of volatile data from a system. It tells you what is happening on a system, and is of particular use when investigating a security incident.
aws dfir security forensics aws-lambda aws-fargate aws-forensics eks-forensics hacktoberfest cloud-security dfir-automation docker-forensics memory-forensics fargate-forensics
This repository has been archived (exclude archived)
Created 2022-09-16
74 commits to main branch, last one 2 months ago
evild3ad
Collect-MemoryDump evild3ad
29
220
gpl-3.0
6
Collect-MemoryDump - Automated Creation of Windows Memory Snapshots for DFIR
dfir powershell live-response memory-forensics digital-forensics incident-response memory-acquisition
Created 2022-07-14
32 commits to main branch, last one 8 months ago
asiamina
A-Course-on-Digital-Forensics asiamina
41
175
unknown
17
A course on "Digital Forensics" designed and offered in the Computer Science Department at Texas Tech University
courses disk-forensics memory-forensics mobile-forensics digital-forensics network-forensics reverse-engineering
Created 2018-05-08
501 commits to master branch, last one about a year ago
msuiche
LiveCloudKd msuiche
45
172
gpl-3.0
11
Hyper-V Research is trendy now
memory-forensics virtual-machines
Created 2018-06-17
136 commits to master branch, last one 6 months ago
cado-security
rip_raw cado-security
16
131
apache-2.0
8
Rip Raw is a small tool to analyse the memory of compromised Linux systems.
dfir security forensics dfir-automation memory-forensics forensic-analysis
This repository has been archived (exclude archived)
Created 2022-01-27
6 commits to main branch, last one 2 years ago
Apr4h
GetInjectedThreads Apr4h
12
50
unknown
1
C# Implementation of Jared Atkinson's Get-InjectedThread.ps1
blueteam memory-forensics incident-response process-injection
Created 2020-06-18
24 commits to master branch, last one 3 years ago
kh4sh3i
Malware-Analysis kh4sh3i
9
43
cc0-1.0
4
A curated list of awesome malware analysis tools and resources
mobsf windbg x64dbg ida-pro malware forensic volatility malware-analysis memory-forensics malware-detection reverse-engineering
Created 2022-01-07
13 commits to main branch, last one 2 years ago