#1Tools for analyzing RAM dumps to find running processes, network connections, and hidden malware.
Kitploit recommended
thalium/iceboxVirtual Machine Introspection, Tracing & Debugging
orlikoski/skadiCollect, Process, and Hunt with host based data from MacOS, Windows, and Linux
david942j/heapinfoAn interactive memory info for pwning / exploiting
awnumar/memguardSoftware sandbox for storage of sensitive information in memory.
dsnezhkov/zombieantZombie Ant Farm: Primitives and Offensive Tooling for Linux EDR evasion.
ion28/bluespawnAn Active Defense and EDR software to empower Blue Teams
jpcertcc/malconfscanVolatility plugin for extracts configuration data of known malware
dynamorio/drmemoryMemory Debugger for Windows, Linux, Mac, and Android
thewover/donutGenerates x86, x64, or AMD64+x86 position-independent shellcode that loads .NET Assemblies, PE files, and other Windows payloads from memory and runs…
travisfoley/dfirtriageDigital forensic acquisition tool for Windows based incident response.
mohuihui/antispyAntiSpy is a free but powerful anti virus and rootkits toolkit.It offers you the ability with the highest privileges that can detect,analyze and…
radareorg/radare2UNIX-like reverse engineering framework and command-line toolset
mandiant/flare-flossFLARE Obfuscated String Solver - Automatically extract obfuscated strings from malware.
equifox/ksdumperDumping processes using the power of kernel space !
zodiacon/alltoolsAll reasonably stable tools
la3ar0v/tuxresponseAutomated Linux incident response script with live triage, memory acquisition (LiME), disk imaging, YARA scanning, and HTML report generation.
marcosd4h/memhunterLive hunting of code injection techniques
