Alternatives and similar repositories for bitlocker:

Users that are interested in bitlocker are comparing it to the libraries listed below

• MagnetForensics / Hibr2Bin
  Comae Hibernation File Decompressor
  ☆143Updated last year
• mkorman90 / VolatilityBot
  VolatilityBot – An automated memory analyzer for malware samples and memory dumps
  ☆264Updated 3 years ago
• 504ensicsLabs / DAMM
  Differential Analysis of Malware in Memory
  ☆211Updated 7 years ago
• kevthehermit / VolUtility
  Web App for Volatility framework
  ☆379Updated 2 months ago
• tomchop / volatility-autoruns
  Autoruns plugin for the Volatility framework
  ☆119Updated 5 years ago
• JamesHabben / evolve
  Web interface for the Volatility Memory Forensics Framework
  ☆260Updated 7 years ago
• williballenthin / EVTXtract
  EVTXtract recovers and reconstructs fragments of EVTX log files from raw binary data, including unallocated space and memory images.
  ☆192Updated 4 years ago
• airbus-cert / regrippy
  A modern Python-3-based alternative to RegRipper
  ☆192Updated 2 months ago
• volatilityfoundation / community
  Volatility plugins developed and maintained by the community
  ☆354Updated 3 years ago
• Velocidex / c-aff4
  An AFF4 C++ implementation.
  ☆195Updated last year
• msuhanov / dfir_ntfs
  An NTFS/FAT parser for digital forensics & incident response
  ☆198Updated 3 months ago
• OMENScan / AChoir
  Windows Live Artifacts Acquisition Script
  ☆186Updated 2 years ago
• msuhanov / Linux-write-blocker
  The kernel patch and userspace tools to enable Linux software write blocking
  ☆139Updated 4 years ago
• mandiant / ShimCacheParser
  ☆275Updated last year
• JohnLaTwC / PyPowerShellXray
  Python script to decode common encoded PowerShell scripts
  ☆216Updated 6 years ago
• williballenthin / INDXParse
  Tool suite for inspecting NTFS artifacts.
  ☆218Updated last year
• PoorBillionaire / Windows-Prefetch-Parser
  Parse Windows Prefetch files: Supports XP - Windows 10 Prefetch files
  ☆115Updated 8 months ago
• ctxis / RDP-Replay
  Replay RDP traffic from PCAP
  ☆190Updated 5 years ago
• Invoke-IR / ForensicPosters
  ☆441Updated 3 months ago
• matonis / page_brute
  Page File analysis tools.
  ☆125Updated 9 years ago
• log2timeline / dfvfs
  Digital Forensics Virtual File System (dfVFS)
  ☆207Updated last month
• mandiant / flare-wmi
  ☆422Updated last year
• nmantani / FileInsight-plugins
  FileInsight-plugins: decoding toolbox of McAfee FileInsight hex editor for malware analysis
  ☆159Updated 2 months ago
• felixweyne / ProcessSpawnControl
  Process Spawn Control is a Powershell tool which aims to help in the behavioral (process) analysis of malware. PsC suspends newly launche…
  ☆261Updated 3 years ago
• davidpany / WMI_Forensics
  ☆297Updated 4 years ago
• moyix / creddump
  Automatically exported from code.google.com/p/creddump
  ☆246Updated 5 years ago
• orlikoski / CDQR
  The Cold Disk Quick Response (CDQR) tool is a fast and easy to use forensic artifact parsing tool that works on disk images, mounted driv…
  ☆336Updated 2 years ago
• ShaneK2 / inVtero.net
  inVtero.net: A high speed (Gbps) Forensics, Memory integrity & assurance. Includes offensive & defensive memory capabilities. Find/Extr…
  ☆281Updated last year
• joesecurity / pafishmacro
  Pafish Macro is a Macro enabled Office Document to detect malware analysis systems and sandboxes. It uses evasion & detection techniques …
  ☆281Updated 7 years ago
• fox-it / danderspritz-evtx
  Parse evtx files and detect use of the DanderSpritz eventlogedit module
  ☆148Updated 7 years ago