Collection of my volatility3 plugins

Max搶票機器人(maxbot) help you quickly buy your tickets

Code for the paper "Language Models are Unsupervised Multitask Learners"

VolMemLyzer (Volatility Memory Analyzer) is a feature extraction module which use Volatility plugins to extract memory features to generate a CSV file for each memory snapshot.

Memray is a memory profiler for Python

Letta (fka MemGPT) is a framework for creating stateful LLM services.

Explores use of text-to-text LLMs for vol prediction, something normally done with number-to-number stochastic volatility model such as the MSM or Heston, with high frequency data. Implementation o…

Forensic analysis of MetaMask : the crypto wallet

Diff and display virtual machine snapshots

The multi-platform memory acquisition tool.

Find traces of Bitcoin and *coins in a chunk of data - RAM/Disk/Image

Memory analysis of Chromium-based browsers

documentation, scripts, tools related to Zena Forensics (http://blog.digital-forensics.it)

A little tool to play with Windows security

Volatile Artifact Collector collects a snapshot of volatile data from a system. It tells you what is happening on a system, and is of particular use when investigating a security incident.

Handbook of windows forensic artifacts across multiple Windows version with interpretation tips and some examples. Work in progress!

A list of free and open forensics analysis tools and other resources

红/蓝队环境自动化部署工具 | Red/Blue team environment automation deployment tool

Vehicle Logs Events And Properties Parser

Windows system utilities to maximize productivity

memory dump tool mirror for version 3.0.20171228.1

Memory FORESHADOW

A free, powerful, multi-purpose tool that helps you monitor system resources, debug software and detect malware. Brought to you by Winsider Seminars & Solutions, Inc. @ http://www.windows-internals…

Rekall Memory Forensic Framework

This is the development tree. Production downloads are at:

Regshot is a small, free and open-source registry compare utility that allows you to quickly take a snapshot of your registry and then compare it with a second one - done after doing system changes…

Allows you to quickly query a Windows machine for RAM artifacts

volatility explorer

TIGMINT: OSINT (Open Source Intelligence) GUI software framework

Trace Labs OSINT VM