kacos2000 / Win10
Win 10/11 related research
☆178Updated 11 months ago
Related projects ⓘ
Alternatives and complementary repositories for Win10
- Windows 10 (v1803+) ActivitiesCache.db parsers (SQLite, PowerShell, .EXE)☆178Updated last year
- Windows Registry Knowledge Base☆162Updated last month
- Windows Prefetch parser. Supports all known versions from Windows XP to Windows 10.☆106Updated 3 months ago
- $MFT directory tree reconstruction & FILE record info☆292Updated last month
- Tool suite for inspecting NTFS artifacts.☆216Updated last year
- Command line access to the Registry☆132Updated 2 weeks ago
- Personal settings for X-Ways Forensics☆32Updated 2 years ago
- Script for parsing Symantec Endpoint Protection logs, VBNs, and ccSubSDK database.☆63Updated last year
- Extract common Windows artifacts from source images and VSCs☆65Updated 3 years ago
- This is a GUI (for Windows 64 bit) for a procedure to virtualize your EWF(E01), DD (raw), AFF disk image file without converting it, dire…☆50Updated 5 years ago
- Parser for $UsnJrnl on NTFS☆108Updated last year
- A modern Python-3-based alternative to RegRipper☆187Updated 2 weeks ago
- Tools from WFA 4/e, timeline tools, etc.☆132Updated 8 months ago
- A repo that contains a recursive dump from the ROOT key of every Windows Registry hive (using KAPE) from a vanilla (clean) install of eve…☆43Updated last year
- Carves and recreates VSS catalog and store from Windows disk image.☆96Updated last year
- A repo that contains recursive directory listings (using PowerShell) of a vanilla (clean) install of every Windows OS version to compare …☆146Updated last month
- ☆60Updated 2 weeks ago
- Yet another registry parser☆130Updated 2 years ago
- http://moaistory.blogspot.com/2018/10/winsearchdbanalyzer.html☆119Updated 4 months ago
- Extract $MFT record info and log it to a csv file.☆259Updated last month
- Software downloads☆93Updated 2 weeks ago
- An NTFS/FAT parser for digital forensics & incident response☆191Updated 2 weeks ago
- MFT parser☆62Updated 8 months ago
- Invoke-LiveResponse☆145Updated 2 years ago
- Documentation repository☆43Updated 2 months ago
- Parses the WMI object database....looking for persistence☆31Updated 4 years ago
- Parser for Windows PowerShell script block logs☆94Updated 3 months ago
- Get all my software☆142Updated 2 months ago
- Cross-platform, open-source shellbag parser☆150Updated last year
- Encyclopedia for Executables☆417Updated 3 years ago