volatilityfoundation/volatility3

• ufrisk/memprocfs

  ufrisk/MemProcFS

  4,202GitHub पर देखें↗

  MemProcFS is a volatile memory analysis tool and cross-platform memory acquisition system. It functions as a memory forensic virtual file system, mapping physical memory and kernel objects into a virtual directory structure that allows users to analyze system artifacts using standard file system tools. The project distinguishes itself by providing a virtual file system for memory forensics, enabling the browsing and querying of physical memory as read-only files and folders. It also incorporates a Yara-based memory scanner to identify malware signatures and injected code within physical memor

  C

  GitHub पर देखें↗4,202
• volatilityfoundation/volatility

  volatilityfoundation/volatility

  7,971GitHub पर देखें↗

  Volatility is a memory forensics framework and digital forensics tool designed to extract and analyze evidence from volatile computer memory dumps. It functions as a memory dump parser and analysis platform used to identify running processes, network connections, and loaded modules from a system RAM capture. The framework enables the reconstruction of system state to uncover malicious activity, such as rootkits and injected code, during malware incident response and threat hunting. It provides capabilities for digital forensic investigations to detect unauthorized access and indicators of com

  Pythonmalwarememorypython

  GitHub पर देखें↗7,971
• jaykali/maskphish

  jaykali/maskphish

  3,020GitHub पर देखें↗

  Maskphish is a comprehensive security toolkit that integrates capabilities for digital forensics, network vulnerability scanning, open-source intelligence, penetration testing, and social engineering. It functions as a multi-purpose framework for automating reconnaissance and executing security audits across diverse network environments. The project features a specialized phishing and social engineering toolkit used for cloning websites, masking URLs, and deploying deceptive pages to capture user credentials. It also includes a remote access Trojan builder for generating platform-specific exe

  Shellhackhackinghacking-tool

  GitHub पर देखें↗3,020
• velocidex/velociraptor

  Velocidex/velociraptor

  3,769GitHub पर देखें↗

  Velociraptor is a digital forensics and incident response platform, endpoint detection and response system, and visibility tool. It provides a query engine and remote forensic collector used to hunt for indicators of compromise and perform triage across a fleet of hosts. The system is distinguished by its specialized query language for interrogating host state and parsing binary files. It features a notebook environment that combines markdown documentation with executable query cells to standardize investigative workflows and enable collaborative reporting. The platform covers a wide range o

  Godigital-forensicsendpoint-discoveryendpoint-protection

  GitHub पर देखें↗3,769

अक्सर पूछे जाने वाले प्रश्न