aff4 / aff4-cpp-liteLinks
A lightweight C++/C AFF4 reader library
☆13Updated 2 years ago
Alternatives and similar repositories for aff4-cpp-lite
Users that are interested in aff4-cpp-lite are comparing it to the libraries listed below
Sorting:
- Scripts and tools created for appx analysis talk (Magnet summit 2019)☆16Updated last year
- Just Another broken Registry Parser (JARP)☆16Updated last year
- AFF4 Standard Documents☆29Updated 3 years ago
- A DFVFS Backed Forensic Viewer☆40Updated 5 years ago
- An updated C# port of X-Ways X-Tensions API.☆12Updated 7 years ago
- Windows registry samples☆23Updated 6 years ago
- Extract compressed memory pages from page-aligned data☆45Updated 6 years ago
- Python library for parsing AccessData AD1 images☆32Updated 2 years ago
- Decode security descriptors in $Secure on NTFS☆20Updated 3 years ago
- ☆21Updated 3 months ago
- Parser for Sdba memory pool tags☆18Updated 3 years ago
- Tools and Binaries to use with KAPE☆12Updated 5 years ago
- A fork of The Sleuthkit with Pooled Storage and APFS support. See https://www.youtube.com/watch?v=k1XPillJ7aw for more info and usage.☆26Updated 5 years ago
- Carve $MFT records from a chunk of data (for instance a memory dump)☆16Updated 8 years ago
- macOS Artifact Intelligence Tool☆13Updated 6 years ago
- Registry to JSON. This Project is for learning purposes and is not maintained.☆12Updated 3 years ago
- A simple utility for stripping out either the SHA-1, MD5 or CRC values alone from the NSRL hash database☆14Updated 3 years ago
- Forensic Analysis Tool for Btrfs File System.☆21Updated 6 years ago
- Forensic cheatsheets for use with cheat☆15Updated 3 years ago
- Miscellaneous Scripts☆17Updated 4 years ago
- ☆18Updated 12 years ago
- NTFS file system specimens☆13Updated last year
- Binaries for the log2timeline projects and dependencies☆39Updated 9 months ago
- NTFS Security Descriptor Stream ($Secure:$SDS) parser☆14Updated 2 years ago
- Library and tools to access the Windows SuperFetch database format☆12Updated last year
- Parses the WMI object database....looking for persistence☆32Updated 5 years ago
- WLEAPP is an open source project that aims to parse Windows OS artifacts for the purpose of triage analysis.☆32Updated last year
- This is a repository for reporting any issues in any of my software☆13Updated 7 years ago
- Registry Explorer bookmark definitions☆43Updated 6 months ago
- Tool for analysis of Windows Prefetch files☆26Updated 6 years ago