kacos2000 / Win10Links
Win 10/11 related research
☆195Updated last year
Alternatives and similar repositories for Win10
Users that are interested in Win10 are comparing it to the libraries listed below
Sorting:
- Windows 10 (v1803+) ActivitiesCache.db parsers (SQLite, PowerShell, .EXE)☆195Updated 2 years ago
- Windows Registry Knowledge Base☆191Updated 2 weeks ago
- Automatic and Custom Destinations jump list parser with Windows 10 support☆113Updated 2 months ago
- Command line access to the Registry☆161Updated 2 months ago
- ☆71Updated 3 months ago
- Windows Prefetch parser. Supports all known versions from Windows XP to Windows 10.☆115Updated 11 months ago
- Registry Explorer bookmark definitions☆43Updated 11 months ago
- $MFT directory tree reconstruction & FILE record info☆321Updated last year
- Software downloads☆109Updated 7 months ago
- Yet another registry parser☆137Updated 3 years ago
- MFT parser☆74Updated 10 months ago
- A config file that's curated for DFIR examiners with shortcuts to common Windows artifacts and settings enabled that help make your life …☆39Updated 11 months ago
- ☆127Updated 10 months ago
- Parser for $LogFile on NTFS☆208Updated 6 months ago
- Tool to extract the $UsnJrnl from an NTFS volume☆109Updated 6 years ago
- A modern Python-3-based alternative to RegRipper☆201Updated 8 months ago
- AppCompatCache (shimcache) parser. Supports Windows 7 (x86 and x64), Windows 8.x, and Windows 10, and Windows 11☆126Updated 11 months ago
- Extract $MFT record info and log it to a csv file.☆283Updated last year
- Parses the WMI object database....looking for persistence☆34Updated 6 years ago
- Full featured, offline Registry parser in C#☆238Updated last month
- Personal settings for X-Ways Forensics☆32Updated 3 years ago
- A better strings utility!☆141Updated 3 months ago
- Parser for $UsnJrnl on NTFS☆118Updated 3 years ago
- Library to access the Windows Shell Item format☆72Updated 2 weeks ago
- ☆21Updated 11 months ago
- A repo that contains a recursive dump from the ROOT key of every Windows Registry hive (using KAPE) from a vanilla (clean) install of eve…☆49Updated last month
- Decode security descriptors in $Secure on NTFS☆21Updated 3 years ago
- http://moaistory.blogspot.com/2018/10/winsearchdbanalyzer.html☆126Updated last year
- This is a GUI (for Windows 64 bit) for a procedure to virtualize your EWF(E01), DD (raw), AFF disk image file without converting it, dire…☆55Updated 6 years ago
- An NTFS/FAT parser for digital forensics & incident response☆218Updated last month