Alternatives and similar repositories for Regshot

Users that are interested in Regshot are comparing it to the libraries listed below

• EricZimmerman / PECmd
  Prefetch Explorer Command Line
  ☆271Updated 9 months ago
• EricZimmerman / MFTECmd
  Parses $MFT from NTFS file systems
  ☆267Updated 5 months ago
• EricZimmerman / LECmd
  Lnk Explorer Command line edition!!
  ☆326Updated 9 months ago
• ArsenalRecon / Arsenal-Image-Mounter
  Arsenal Image Mounter mounts the contents of disk images as complete disks in Microsoft Windows.
  ☆648Updated this week
• thewhiteninja / ntfstool
  Forensics tool for NTFS (parser, mft, bitlocker, deleted files)
  ☆540Updated 2 years ago
• LETHAL-FORENSICS / MemProcFS-Analyzer
  MemProcFS-Analyzer - Automated Forensic Analysis of Windows Memory Dumps for DFIR
  ☆677Updated 2 months ago
• skydive241 / Regshot-Advanced
  This is a fork of Regshot (original found at https://sourceforge.net/projects/regshot/) with very enhanced functionality.
  ☆80Updated 4 years ago
• keydet89 / RegRipper3.0
  RegRipper3.0
  ☆647Updated 10 months ago
• Sysinternals / sysinternals
  Content for sysinternals.com
  ☆75Updated 5 years ago
• atlantsecurity / windows-hardening-scripts
  Windows 10/11 hardening scripts
  ☆257Updated 3 weeks ago
• Psmths / windows-forensic-artifacts
  Handbook of windows forensic artifacts across multiple Windows version with interpretation tips and some examples. Work in progress!
  ☆389Updated last year
• Squiblydoo / debloat
  A GUI and CLI tool for removing bloat from executables
  ☆424Updated 3 months ago
• Velocidex / WinPmem
  The multi-platform memory acquisition tool.
  ☆849Updated 3 months ago
• d4rksystem / VBoxCloak
  A PowerShell script that attempts to help malware analysts hide their Windows VirtualBox Windows VM's from malware that may be trying to …
  ☆313Updated 3 months ago
• m417z / winbindex
  An index of Windows binaries, including download links for executables such as exe, dll and sys files
  ☆697Updated this week
• EricZimmerman / evtx
  C# based evtx parser with lots of extras
  ☆328Updated last month
• microsoft / EventLogExpert
  ☆212Updated 4 months ago
• SafeBreach-Labs / WindowsDowndate
  A tool that takes over Windows Updates to craft custom downgrades and expose past fixed vulnerabilities
  ☆681Updated 11 months ago
• strontic / xcyclopedia
  Encyclopedia for Executables
  ☆455Updated 3 years ago
• PhrozenIO / DLest
  Microsoft Windows DLL Export Browser (Enumerate Exports, COM Methods and Properties) with Advanced Search Features.
  ☆238Updated last year
• jschicht / Mft2Csv
  Extract $MFT record info and log it to a csv file.
  ☆277Updated last year
• kacos2000 / MFT_Browser
  $MFT directory tree reconstruction & FILE record info
  ☆310Updated last year
• libyal / winreg-kb
  Windows Registry Knowledge Base
  ☆185Updated last year
• zodiacon / TotalRegistry
  Total Registry - enhanced Registry editor/viewer
  ☆1,528Updated last month
• d4rksystem / VMwareCloak
  A PowerShell script that attempts to help malware analysts hide their VMware Windows VM's from malware that may be trying to evade analys…
  ☆397Updated 8 months ago
• thimbleweed / All-In-USB
  ☆148Updated 11 years ago
• mandiant / VM-Packages
  Chocolatey packages supporting the analysis environment projects FLARE-VM & Commando VM.
  ☆201Updated this week
• Malandrone / PowerDecode
  PowerDecode is a PowerShell-based tool that allows to deobfuscate PowerShell scripts obfuscated across multiple layers. The tool performs…
  ☆210Updated last year
• wolfram77web / app-peid
  PEiD detects most common packers, cryptors and compilers for PE files.
  ☆308Updated 8 years ago
• kmaki565 / EventLook
  A fast & handy alternative to Windows Event Viewer
  ☆103Updated 4 months ago