#1Tools for analyzing RAM dumps to find running processes, network connections, and hidden malware.
Kitploit recommended
hluwa/frida-dexdumpA frida tool to dump dex in memory to support security engineers analyzing malware.
itm4n/ppldumpDump the memory of a PPL with a userland exploit
blackberry/pe_treePython module for viewing Portable Executable (PE) files in a tree-view using pefile and PyQt5. Can also be used with IDA Pro and Rekall to dump…
ivan-sincek/invokerPenetration testing utility and antivirus assessment tool.
mozilla/migDistributed & real time digital forensics at the speed of the cloud
intezer/linux-explorerEasy-to-use live forensics toolbox for Linux endpoints
cisco-talos/pyreboxPython scriptable Reverse Engineering Sandbox, a Virtual Machine instrumentation and inspection framework based on QEMU
volatilityfoundation/volatilityAn advanced memory forensics framework
