NetworkMiner

Freemium

Network forensics analysis tool (NFAT) that captures packets and parses them to reconstruct transmit…

Volatility Workbench

Free

Free GUI front-end for Volatility 3 memory forensics framework on Windows. Simplifies memory analysi…

goodboy-framework

Open Source

15-stage Windows malware development & analysis course in Rust. Red team builds it, blue team detect…

pe-sieve

Open Source

Scans a given process. Recognizes and dumps a variety of potentially malicious implants (replaced/in…

SingleFileExtractor

Open Source

A tool for extracting contents (assemblies, configuration, etc.) from a single-file application to a…

Meerkat

Open Source

A collection of PowerShell modules designed for artifact gathering and reconnaisance of Windows-base…