#

memory-forensics

Here are 62 public repositories matching this topic...

hasherezade / pe-sieve

Scans a given process. Recognizes and dumps a variety of potentially malicious implants (replaced/injected PEs, shellcodes, hooks, in-memory patches).

scans anti-malware malware-analysis pe-format hooking pe-analyzer memory-forensics pe-dumper libpeconv process-analyzer pe-sieve

Updated Nov 6, 2024
C++

hasherezade / hollows_hunter

Scans all running processes. Recognizes and dumps a variety of potentially malicious implants (replaced/implanted PEs, shellcodes, hooks, in-memory patches).

anti-malware malware-analysis memory-forensics malware-detection pe-sieve

Updated Nov 6, 2024
C

MemLabs

stuxnet999 / MemLabs

Educational, CTF-styled labs for individuals interested in Memory Forensics

windows security forensics dfir cybersecurity ctf digital-forensics memory-forensics ctf-challenges

Updated Mar 8, 2021
Shell

microsoft / avml

AVML - Acquire Volatile Memory for Linux

rust memory-forensics linux-security

Updated Nov 18, 2024
Rust

hasherezade / mal_unpack

Dynamic unpacker based on PE-sieve

malware-analysis memory-forensics libpeconv pe-sieve malware-unpacker

Updated Feb 26, 2024
C

swwwolf / wdbgark

WinDBG Anti-RootKit Extension

Updated Jul 29, 2020
C++

evild3ad / MemProcFS-Analyzer

MemProcFS-Analyzer - Automated Forensic Analysis of Windows Memory Dumps for DFIR

powershell incident-response dfir digital-forensics memory-forensics live-response memprocfs

Updated Oct 29, 2024
PowerShell

teamdfir / sift

SIFT

cli aws forensics saltstack cast sift memory-forensics sans issues-only timeline-analysis salt-state cast-distro

Updated Feb 14, 2024

patois / IDACyber

Data Visualization Plugin for IDA Pro

pixel-art reverse-engineering data-visualization memory-hacking ida ida-pro cyber exploitation idapython-plugin memory-forensics color-filter firmware-analysis

Updated Dec 6, 2022
Python

cado-security / varc

Volatile Artifact Collector collects a snapshot of volatile data from a system. It tells you what is happening on a system, and is of particular use when investigating a security incident.

aws security aws-lambda forensics dfir hacktoberfest memory-forensics cloud-security aws-fargate dfir-automation docker-forensics aws-forensics eks-forensics fargate-forensics

Updated Nov 18, 2024
Python

evild3ad / Collect-MemoryDump

Collect-MemoryDump - Automated Creation of Windows Memory Snapshots for DFIR

powershell incident-response dfir digital-forensics memory-forensics live-response memory-acquisition

Updated Mar 9, 2024
PowerShell

gleeda / memtriage

Allows you to quickly query a Windows machine for RAM artifacts

ram memory malware memory-analysis volatility memory-forensics windows-machine live-analysis winpmem

Updated Jul 17, 2020
Python

asiamina / A-Course-on-Digital-Forensics

A course on "Digital Forensics" designed and offered in the Computer Science Department at Texas Tech University

network-forensics reverse-engineering courses digital-forensics memory-forensics mobile-forensics disk-forensics

Updated Oct 5, 2023
Rich Text Format

msuiche / LiveCloudKd

Hyper-V Research is trendy now

virtual-machines memory-forensics

Updated May 6, 2024
C

cado-security / rip_raw

Rip Raw is a small tool to analyse the memory of compromised Linux systems.

security forensics dfir forensic-analysis memory-forensics dfir-automation

Updated Jan 31, 2022
Python

ytisf / muninn

A short and small memory forensics helper.

python volatility memory-forensics

Updated Oct 18, 2017
Python

Apr4h / GetInjectedThreads

C# Implementation of Jared Atkinson's Get-InjectedThread.ps1

incident-response blueteam memory-forensics process-injection

Updated Jul 11, 2021
C#

kh4sh3i / Malware-Analysis

A curated list of awesome malware analysis tools and resources

reverse-engineering malware ida-pro windbg malware-analysis mobsf volatility x64dbg memory-forensics malware-detection forensic

Updated Jan 8, 2022

sk4la / volatility3-docker

Volatility, on Docker 🐳

docker forensics digital-forensics volatility memory-forensics volatility-framework volatility3

Updated Jul 8, 2024
Dockerfile

Hestat / calamity

A script to assist in processing forensic RAM captures for malware triage

dfir malware-analysis volatility memory-forensics

Updated Feb 4, 2021
Shell

Improve this page

Add a description, image, and links to the memory-forensics topic page so that developers can more easily learn about it.

Curate this topic

Add this topic to your repo

To associate your repository with the memory-forensics topic, visit your repo's landing page and select "manage topics."