Alternatives and similar repositories for Regshot:

Users that are interested in Regshot are comparing it to the libraries listed below

• EricZimmerman / PECmd
  Prefetch Explorer Command Line
  ☆237Updated 2 weeks ago
• d4rksystem / VBoxCloak
  A PowerShell script that attempts to help malware analysts hide their Windows VirtualBox Windows VM's from malware that may be trying to …
  ☆286Updated last year
• strontic / xcyclopedia
  Encyclopedia for Executables
  ☆427Updated 3 years ago
• EricZimmerman / LECmd
  Lnk Explorer Command line edition!!
  ☆287Updated 2 weeks ago
• AndyFul / Hard_Configurator
  GUI to Manage Software Restriction Policies and harden Windows Home OS
  ☆514Updated last week
• p0w3rsh3ll / AutoRuns
  🚀AutoRuns is a PowerShell module that will help do live incident response and enumerate autoruns artifacts that may be used by legitima…
  ☆264Updated 3 weeks ago
• skydive241 / Regshot-Advanced
  This is a fork of Regshot (original found at https://sourceforge.net/projects/regshot/) with very enhanced functionality.
  ☆69Updated 3 years ago
• kacos2000 / MFT_Browser
  $MFT directory tree reconstruction & FILE record info
  ☆296Updated 3 months ago
• thewhiteninja / ntfstool
  Forensics tool for NTFS (parser, mft, bitlocker, deleted files)
  ☆494Updated last year
• zodiacon / TotalRegistry
  Total Registry - enhanced Registry editor/viewer
  ☆1,450Updated last week
• moaistory / WinSearchDBAnalyzer
  http://moaistory.blogspot.com/2018/10/winsearchdbanalyzer.html
  ☆121Updated 6 months ago
• Sysinternals / sysinternals
  Content for sysinternals.com
  ☆70Updated 5 years ago
• m417z / winbindex
  An index of Windows binaries, including download links for executables such as exe, dll and sys files
  ☆627Updated this week
• fafalone / RunAsTrustedInstaller
  Run a program as TrustedInstaller (SYSTEM)
  ☆114Updated 4 months ago
• PhrozenIO / DLest
  Microsoft Windows DLL Export Browser (Enumerate Exports, COM Methods and Properties) with Advanced Search Features.
  ☆194Updated 7 months ago
• M2Team / NanaRun
  Application runtime environment customization utility
  ☆450Updated 3 months ago
• MicrosoftDocs / sysinternals
  Content for sysinternals.com
  ☆493Updated 2 weeks ago
• ArsenalRecon / Arsenal-Image-Mounter
  Arsenal Image Mounter mounts the contents of disk images as complete disks in Microsoft Windows.
  ☆557Updated this week
• atlantsecurity / windows-hardening-scripts
  Windows 10/11 hardening scripts
  ☆240Updated last month
• wolfram77web / app-peid
  PEiD detects most common packers, cryptors and compilers for PE files.
  ☆260Updated 7 years ago
• GTGalaxi / quick-lookup-ptrun
  Quick Lookup Plugin for PowerToys Run (Wox)
  ☆150Updated last month
• EricZimmerman / MFTECmd
  Parses $MFT from NTFS file systems
  ☆214Updated last week
• evild3ad / MemProcFS-Analyzer
  MemProcFS-Analyzer - Automated Forensic Analysis of Windows Memory Dumps for DFIR
  ☆569Updated 2 months ago
• libyal / winreg-kb
  Windows Registry Knowledge Base
  ☆170Updated 3 months ago
• jschicht / Mft2Csv
  Extract $MFT record info and log it to a csv file.
  ☆263Updated 3 months ago
• DanysysTeam / PS-SFTA
  PowerShell Set File Type Association
  ☆287Updated 2 years ago
• AveYo / LeanAndMean
  snippets for power users
  ☆291Updated 2 months ago
• Squiblydoo / debloat
  A GUI and CLI tool for removing bloat from executables
  ☆373Updated 3 weeks ago
• Malandrone / PowerDecode
  PowerDecode is a PowerShell-based tool that allows to deobfuscate PowerShell scripts obfuscated across multiple layers. The tool performs…
  ☆166Updated 9 months ago
• ditekshen / detection
  Detection in the form of Yara, Snort and ClamAV signatures.
  ☆218Updated 2 months ago