Awesome-Mirrors/awesome-incident-response
1
0
Fork 0
mirror of https://github.com/meirwah/awesome-incident-response.git synced 2024-10-01 01:06:19 -04:00
Code Issues Packages Projects Releases Wiki Activity
A curated list of tools for incident response
4 Commits 3 Branches 0 Tags 1.7 MiB
Markdown 100%
5a6fabdb3f
Go to file
Meir Wahnon 5a6fabdb3f Add memory Analysis Tools
2015-11-13 20:23:10 +02:00
LICENSE Initial commit 2015-11-11 00:10:58 +02:00
README.md Add memory Analysis Tools 2015-11-13 20:23:10 +02:00

README.md

awesome-incident-response

A curated list of tools for incident response

Awesome

IR tools Collection

Disk Image Creation Tools

Web traffic anonymizers for analysts.

  • GetData Forensic Imager - GetData Forensic Imager is a Windows based program that will acquire, convert, or verify a forensic image in one of the following common forensic file formats
  • Guymager - Guymager is a free forensic imager for media acquisition on Linux
  • AccessData FTK Imager - AccessData FTK Imager is a forensics tool whose main purpose is to preview recoverable data from a disk of any kind. FTK Imager can also acquire live memory and paging file on 32bit and 64bit systems

Memory Analysis Tools

  • Volatility - An advanced memory forensics framework
  • Evolve
  • WindowsSCOPE - another memory forensics and reverse engineering tool used for analyzing volatile memory. It is basically used for reverse engineering of malwares. It provides the capability of analyzing the Windows kernel, drivers, DLLs, virtual and physical memory
  • Responder PRO - Responder PRO is the industry standard physical memory and automated malware analysis solution
  • KnTList - Computer memory analysis tools