0xsp-SRD/aether

Detects process injection and memory manipulation used by malware. Finds RWX regions, shellcode patterns, API hooks, thread hijacking, and process hollowing. Built in Rust for speed. Includes CLI and TUI interfaces.

MemProcFS-Analyzer - Automated Forensic Analysis of Windows Memory Dumps for DFIR

Scans a given process. Recognizes and dumps a variety of potentially malicious implants (replaced/injected PEs, shellcodes, hooks, in-memory patches).

Radical Windows ARK

MemProcFS

Rapidly Search and Hunt through Windows Forensic Artefacts

APT-Hunter is Threat Hunting tool for windows event logs which made by purple team mindset to provide detect APT movements hidden in the sea of windows event logs to decrease the time to uncover suspicious activity

Windows tool for dumping malware PE files from memory back to disk for analysis.

A centralized and enhanced memory analysis platform