aff4 / pyaff4
The Python implementation of the AFF4 standard.
☆45Updated 10 months ago
Alternatives and similar repositories for pyaff4:
Users that are interested in pyaff4 are comparing it to the libraries listed below
- AFF4 Standard Documents☆28Updated 3 years ago
- A fork of The Sleuthkit with Pooled Storage and APFS support. See https://www.youtube.com/watch?v=k1XPillJ7aw for more info and usage.☆26Updated 5 years ago
- Extract common Windows artifacts from source images and VSCs☆65Updated 3 years ago
- Yet another registry parser☆130Updated 2 years ago
- A DFVFS Backed Forensic Viewer☆40Updated 4 years ago
- A rewrite of mactime, a bodyfile reader☆36Updated 6 months ago
- Python library for parsing AccessData AD1 images☆31Updated last year
- WLEAPP is an open source project that aims to parse Windows OS artifacts for the purpose of triage analysis.☆31Updated last year
- Python bindings for The Sleuth Kit (libtsk)☆95Updated 2 months ago
- Different DFIR and CTI utilities☆36Updated 4 years ago
- It is based on bulk_extractor (https://github.com/simsong/bulk_extractor) and add scanners for record carving☆40Updated 4 years ago
- Example programs used in the automating DFIR series☆64Updated 5 years ago
- macOS triage is a python script to collect various macOS logs, artifacts, and other data.☆26Updated 3 years ago
- Command line utility and Python package to ease the (un)mounting of forensic disk images☆122Updated 2 years ago
- Script that checks for available updates for the most commonly used Digital Forensics tools☆58Updated 4 years ago
- Digital Forensics Windows Registry (dfWinReg)☆49Updated 2 months ago
- Personal settings for X-Ways Forensics☆32Updated 2 years ago
- This is a GUI (for Windows 64 bit) for a procedure to virtualize your EWF(E01), DD (raw), AFF disk image file without converting it, dire…☆54Updated 5 years ago
- Converting data from services like Censys and Shodan to a common data model☆49Updated 5 months ago
- Pythonic way to work with the warning lists defined there: https://github.com/MISP/misp-warninglists☆32Updated 3 weeks ago
- Binaries for the log2timeline projects and dependencies☆39Updated 5 months ago
- ☆30Updated 4 years ago
- Specifications used in the MISP project including MISP core format☆51Updated last month
- Python IOC Editor☆62Updated 9 years ago
- Registry Explorer bookmark definitions☆41Updated 2 months ago
- Papers and Presentations from the DFRWS Conferences☆20Updated 2 years ago
- DC3 SQLite Dissect☆59Updated 3 months ago
- Digital Forensics Artifacts Knowledge Base☆77Updated 9 months ago
- An NTFS journal parser☆82Updated 9 years ago