Tool Ratings

Simple IOC and YARA scanner. Checks files against known indicators of compromise, suspicious filenames, and YARA rules.

Interactive data mining and link analysis tool. Visualize relationships between people, domains, IPs, and infrastructure. Essential for OSINT.

Physical memory acquisition tool for Windows. Captures RAM for forensic analysis. Kernel driver-based, minimal footprint.

Open-source intelligence automation tool. 200+ modules for OSINT collection. Web UI, CLI, correlations, and data visualization.

Sysinternals system monitor. Logs process creation, network connections, file changes, and driver loads. Essential for threat detection.

Pattern matching tool for malware researchers. Create rules to identify and classify malware samples. Used by antivirus engines worldwide.