forensicmatt / libtsk-rsLinks
Wrapper for TSK (Sleuth Kit) Bindings
☆12Updated 2 years ago
Alternatives and similar repositories for libtsk-rs
Users that are interested in libtsk-rs are comparing it to the libraries listed below
Sorting:
- Manage Your Large Team of Consultants☆11Updated 3 months ago
- USN to JSON☆22Updated 5 years ago
- $MFT parser (from live systems or a copy of the $MFT) and raw file copy utility☆38Updated last year
- A Windows registry file parser written in Rust☆41Updated last month
- Windows file metadata / forensic tool.☆18Updated 2 months ago
- Windows registry samples☆24Updated 7 years ago
- Carve file metadata from NTFS index ($I30) attributes☆71Updated last year
- ☆36Updated 2 years ago
- Parsers for common structures across windows formats.☆12Updated 2 years ago
- Publicly shareable windows event log message data☆27Updated 6 years ago
- Python library for parsing AccessData AD1 images☆33Updated 2 years ago
- NTFS file system specimens☆13Updated 2 years ago
- Extension blocks as found in ShellBags and other places in the Registry☆25Updated 11 months ago
- Windows Thingies... but in Rust☆23Updated 3 years ago
- lnk_parser is a full rust implementation to parse windows LNK files☆22Updated 5 months ago
- NTFS Security Descriptor Stream ($Secure:$SDS) parser☆14Updated 2 years ago
- LNK to JSON☆14Updated 6 years ago
- Just Another broken Registry Parser (JARP)☆16Updated last year
- Registry Explorer bookmark definitions☆43Updated last year
- Script for parsing Symantec Endpoint Protection logs, VBNs, and ccSubSDK database.☆64Updated 3 years ago
- ☆23Updated 9 months ago
- Parses the WMI object database....looking for persistence☆34Updated 6 years ago
- Python script for parsing ESET (NOD32) virlog.dat file.☆14Updated 8 years ago
- A parser of Windows Defender's DetectionHistory forensic artifact, containing substantial info about quarantined files and executables.☆114Updated 3 years ago
- Imphash-like calculation on Golang binaries☆49Updated 3 years ago
- MFT parser☆74Updated 10 months ago
- Yara rules☆22Updated 2 years ago
- A repo that contains a recursive dump from the ROOT key of every Windows Registry hive (using KAPE) from a vanilla (clean) install of eve…☆50Updated last month
- A document tagging library☆32Updated 8 months ago
- ☆71Updated 4 months ago