#1Tools for analyzing RAM dumps to find running processes, network connections, and hidden malware.
Kitploit recommended
alessandroz/lazagneCross-platform credential recovery tool that extracts stored passwords from browsers, email clients, databases, system mechanisms, and network…
ufrisk/pcileechDirect Memory Access (DMA) Attack Software
volatilityfoundation/volatility3Advanced framework for extracting digital artifacts from volatile memory (RAM) samples, enabling deep forensic analysis of system runtime state…
mandiant/flare-flossFLARE Obfuscated String Solver - Automatically extract obfuscated strings from malware.
google/timesketchCollaborative forensic timeline analysis platform for ingesting, searching, and annotating event logs to support incident response and DFIR…
google/grrRemote live forensics and incident response framework with Python agent for collecting forensic data from endpoints, including memory, disk, and…
sepinf-inc/ipedIPED Digital Forensic Tool. It is an open source software that can be used to process and analyze digital evidence, often seized at crime scenes by…
stephenfewer/reflectivedllinjectionReflective DLL injection is a library injection technique in which the concept of reflective programming is employed to perform the loading of a…
zer0yu/awesome-cobaltstrikeList of Awesome CobaltStrike Resources
purp1ew0lf/blue-team-notesYou didn't think I'd go and leave the blue team out, right?
microsoft/procdump-for-linuxA Linux version of the ProcDump Sysinternals tool
rabbitstack/fibratusSecurity sensor for realtime threat detection and protection
jipegit/osxauditorOS X Auditor is a free Mac OS X computer forensics tool
thewover/donutGenerates x86, x64, or AMD64+x86 position-independent shellcode that loads .NET Assemblies, PE files, and other Windows payloads from memory and runs…
monoxgas/srdiShellcode implementation of Reflective DLL Injection. Convert DLLs to position independent shellcode
mikeroyal/digital-forensics-guideDigital Forensics Guide. Learn all about Digital Forensics, Computer Forensics, Mobile device Forensics, Network Forensics, and Database Forensics.
