ch0ic3/awesome-malware-analysis
1
0
Fork 0
mirror of https://github.com/rshipp/awesome-malware-analysis.git synced 2024-12-18 10:26:07 +00:00
Code Issues Actions Packages Projects Releases Wiki Activity

Add memory forensics section

Browse Source
This commit is contained in:
rshipp 2015-05-08 22:41:41 -06:00
parent 5b88ec921a
commit 890744d5ce
1 changed files with 12 additions and 0 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

12
README.md
View File

@ -11,6 +11,7 @@ A curated list of awesome malware analysis tools and resources. Inspired by
- [Malware Corpora](#malware-corpora)
- [Detection and Classification](#detection-and-classification)
- [Online Scanners and Sandboxes](#online-scanners-and-sandboxes)
- [Memory Forensics](#memory-forensics)
- [Miscellaneous](#miscellaneous)
- [Resources](#resources)
- [Books](#books)
@ -60,6 +61,17 @@ A curated list of awesome malware analysis tools and resources. Inspired by
* [VirusTotal](https://www.virustotal.com/) - Free online analysis of malware
samples and URLs
## Memory Forensics
* [FindAES](https://jessekornblum.livejournal.com/269749.html) - Find AES
encryption keys in memory.
* [Rekall](http://www.rekall-forensic.com/) - Memory analysis framework,
forked from Volatility in 2013.
* [TotalRecall](https://github.com/sketchymoose/TotalRecall) - Script based
on Volatility for automating various malware analysis tasks.
* [Volatility](https://github.com/volatilityfoundation/volatility) - Advanced
memory forensics framework.
## Miscellaneous
* [REMnux](https://remnux.org/) - Linux distribution and docker images for