#1Tools for analyzing RAM dumps to find running processes, network connections, and hidden malware.
Kitploit recommended
monnappa22/limonLimon is a sandbox developed as a research project written in python, which automatically collects, analyzes, and reports on the run time indicators…
netspi/sshkey-grabGrab ssh keys from ssh-agent
biggiesmallsag/nighthawkresponseIncident Response Forensic Framework
liamg/dismember:knife: Scan memory for secrets and more. Maybe eventually a full /proc toolkit.
hzphreak/vminjectorDLL Injection tool to unlock guest VMs
forrest-orr/monetaMoneta is a live usermode memory analysis tool for Windows with the capability to detect malware IOCs
halpomeranz/lmgScript for automating Linux memory capture and analysis
azr43lkn1ght/dfir-labsHands-on DFIR challenges covering digital forensics, incident response, malware analysis, and threat hunting with CTF-style flags and real-world…
rastrea2r/rastrea2rCollecting & Hunting for IOCs with gusto and style
reverseclabs/physmem2profitPhysmem2profit can be used to create a minidump of a target hosts' LSASS process by analysing physical memory remotely
mrt4ntr4/ntwardenWindows Analysis and Research Toolkit
kkent030315/pagetableinjectionCode Injection, Inject malicious payload via pagetables pml4.
viralmaniar/remote-desktop-caching-This tool allows one to recover old RDP (mstsc) session information in the form of broken PNG files. These PNG files allows Red Team member to…
nour833/stegoforgeThe ultimate steganography and digital forensics toolkit. Hide and extract data across images, audio, video, documents, and network packets, or run…
thalium/iceboxVirtual Machine Introspection, Tracing & Debugging
mastercodeon314/ksdumper-11A revival of the classic and legendary KsDumper
blacksnufkin/novaldrThreadless Module Stomping In Rust with some features (In memory of those murdered in the Nova party massacre)
orlikoski/skadiCollect, Process, and Hunt with host based data from MacOS, Windows, and Linux
