volatilityfoundation/volatility 📦

An advanced memory forensics framework

Language: Python - Size: 20.6 MB - Last synced at: 28 days ago - Pushed at: about 1 month ago - Stars: 7,690 - Forks: 1,316

volatilityfoundation/volatility3

Volatility 3.0 development

Language: Python - Size: 9.62 MB - Last synced at: 10 days ago - Pushed at: 10 days ago - Stars: 3,177 - Forks: 518

Hack-with-Github/Powerful-Plugins

Powerful plugins and add-ons for hackers

Size: 47.9 KB - Last synced at: 3 months ago - Pushed at: over 1 year ago - Stars: 853 - Forks: 257

volatilityfoundation/community

Volatility plugins developed and maintained by the community

Language: Python - Size: 34.5 MB - Last synced at: 23 days ago - Pushed at: about 4 years ago - Stars: 363 - Forks: 141

LDO-CERT/orochi

The Volatility Collaborative GUI

Language: JavaScript - Size: 73 MB - Last synced at: 7 days ago - Pushed at: 8 days ago - Stars: 246 - Forks: 21

memoryforensics1/VolExp

volatility explorer

Language: Python - Size: 1.51 MB - Last synced at: 2 months ago - Pushed at: over 4 years ago - Stars: 91 - Forks: 15

memoryforensics1/Vol3xp

Volatility Explorer Suit

Language: Python - Size: 3.39 MB - Last synced at: 3 months ago - Pushed at: over 2 years ago - Stars: 63 - Forks: 12

K2/Scripting

PS / Bash / Python / Other scripts For FUN!

Language: PowerShell - Size: 1.38 MB - Last synced at: 2 months ago - Pushed at: 4 months ago - Stars: 55 - Forks: 6

eset/volatility-browserhooks

Volatility Framework plugin to detect various types of hooks as performed by banking Trojans

Language: Python - Size: 29.3 KB - Last synced at: about 2 months ago - Pushed at: over 6 years ago - Stars: 41 - Forks: 14

sk4la/volatility3-docker

Volatility, on Docker 🐳

Language: Dockerfile - Size: 110 KB - Last synced at: 2 months ago - Pushed at: 2 months ago - Stars: 33 - Forks: 4

JPCERTCC/etw-scan

ETW forensic tool for Volatility3 plugin

Language: Python - Size: 2.61 MB - Last synced at: about 1 month ago - Pushed at: 7 months ago - Stars: 13 - Forks: 0

forensenellanebbia/volatility-profiles

My Linux profiles built for Volatility 2/3

Size: 23.4 MB - Last synced at: 1 day ago - Pushed at: 8 months ago - Stars: 11 - Forks: 2

vavarachen/volatility_automation

A tool to automate memory dump processing using Volatility, including optional Splunk integration.

Language: Python - Size: 14.5 MB - Last synced at: over 2 years ago - Pushed at: almost 5 years ago - Stars: 8 - Forks: 3

CrunchCorps/Dumpalyzer

Dumpalyzer is a bash script whose purose is to analyze Memory and HDD files, forensically extract them with five different tools in an interactive mode, and output organized log files.

Language: Shell - Size: 5.99 MB - Last synced at: 12 months ago - Pushed at: almost 2 years ago - Stars: 5 - Forks: 1

tr4c3datr4il/VolTool

Tools related to Volatility

Language: Python - Size: 10.7 KB - Last synced at: over 1 year ago - Pushed at: over 1 year ago - Stars: 4 - Forks: 0

ImDuong/vola-auto

The ultimate streamline for volatility 3. Speed up process of memory artifacts extraction phase

Language: Go - Size: 86.9 KB - Last synced at: about 1 year ago - Pushed at: about 1 year ago - Stars: 2 - Forks: 0

AsafEitani/Volatility3LinuxSymbols

Linux symbols creation tool for Volatility3

Language: Shell - Size: 2.93 KB - Last synced at: over 2 years ago - Pushed at: over 2 years ago - Stars: 2 - Forks: 2

joezbub/Memory-Forensics-Plugins

Volatility plugins to recover ML model attributes from memory images

Language: Python - Size: 10.1 MB - Last synced at: over 2 years ago - Pushed at: almost 4 years ago - Stars: 2 - Forks: 2

jan-hendrik-lang/MemoryInvestigator

Enhancing RAM Investigation with LLM and RAG

Language: Python - Size: 2.17 MB - Last synced at: 4 months ago - Pushed at: 4 months ago - Stars: 1 - Forks: 0

KrazyC1/GLASS-volatility

GLASS (Global Language And Site Scanner) is a Volatility plugin designed by Clayton Wenzel, James Baumhardt, and Nathan Eberly, aiming to swiftly identify and classify malicious domains and unexpected languages within a memory dump, providing users with dynamic insights for forensic investigations.

Language: Python - Size: 18 MB - Last synced at: about 1 year ago - Pushed at: about 1 year ago - Stars: 1 - Forks: 0

manuelmusngi/volatility_smile_trading_analysis

a C++ framework

Language: C++ - Size: 61.5 KB - Last synced at: 26 days ago - Pushed at: 26 days ago - Stars: 0 - Forks: 0

Esteban150/Oro

Auto referrals. [FOR SALE]

Size: 2.93 KB - Last synced at: about 1 month ago - Pushed at: about 1 month ago - Stars: 0 - Forks: 0

terracota19/Digital-Forensics-Volatility-Installer-for-Kali

This script automates the installation and configuration of the Volatility Framework on Kali, using isolated Python 2 virtual environments to ensure compatibility with legacy forensic tools.

Language: Shell - Size: 82 KB - Last synced at: about 1 month ago - Pushed at: about 1 month ago - Stars: 0 - Forks: 0

terracota19/Volatility-Auto-Analysis-GUI

A Python2 GUI tool to automate memory dump analysis using Volatility 2.6.1. It allows users to load memory files, automatically detects the correct profile with imageinfo, and runs common forensic commands. Results are organized into case folders for easy review.

Language: Python - Size: 89.8 KB - Last synced at: 19 days ago - Pushed at: about 2 months ago - Stars: 0 - Forks: 0

reverseame/heaplist Fork of abeDCP/HeapList

Volatility 3 plugin to extract the heap from Windows memory images

Language: Python - Size: 61.5 KB - Last synced at: 4 months ago - Pushed at: 4 months ago - Stars: 0 - Forks: 0

0xrajneesh/Memory-Forensics-with-Volatility-on-Linux

Hands-on lab for memory forensics on Linux using Volatility, covering memory dump analysis, process investigation, network connections, hidden data, malware detection, and browser artifacts extraction.

Size: 2.93 KB - Last synced at: 11 months ago - Pushed at: 11 months ago - Stars: 0 - Forks: 0

Rajpratik71/volatility-wiki

Size: 1.4 MB - Last synced at: about 1 year ago - Pushed at: over 1 year ago - Stars: 0 - Forks: 0

lzwgiter/DigDog

DigDog-基于深度学习和内存取证技术的恶意软件检测框架

Language: Python - Size: 1.28 MB - Last synced at: about 2 years ago - Pushed at: over 2 years ago - Stars: 0 - Forks: 2

ImranTheThirdEye/volatility-install

Volatility is a command line memory analysis and forensics tool for extracting artifacts from memory dumps. Volatility Workbench is free, open source and runs in Windows. It provides a number of advantages over the command line version including, No need to install Python script interpreter.

Size: 1.86 MB - Last synced at: almost 2 years ago - Pushed at: almost 3 years ago - Stars: 0 - Forks: 0

Lucho-A/Auditing-Forensic

Essential set of tools for carrying out a forensic activity in line with the RFC 3227: "Guidelines for Evidence Collection and Archiving".

Size: 132 KB - Last synced at: over 2 years ago - Pushed at: almost 3 years ago - Stars: 0 - Forks: 0

SatyenderYadav/volatilitycommand

Volatility Command Search Engine

Language: HTML - Size: 720 KB - Last synced at: over 1 year ago - Pushed at: almost 4 years ago - Stars: 0 - Forks: 0