kacos2000 / Win10Links
Win 10/11 related research
☆197Updated 2 years ago
Alternatives and similar repositories for Win10
Users that are interested in Win10 are comparing it to the libraries listed below
Sorting:
- Windows 10 (v1803+) ActivitiesCache.db parsers (SQLite, PowerShell, .EXE)☆195Updated 2 years ago
- Windows Registry Knowledge Base☆193Updated 3 weeks ago
- Automatic and Custom Destinations jump list parser with Windows 10 support☆113Updated 3 months ago
- ☆73Updated this week
- Command line access to the Registry☆163Updated last week
- Windows Prefetch parser. Supports all known versions from Windows XP to Windows 10.☆115Updated last year
- MFT parser☆74Updated 11 months ago
- Registry Explorer bookmark definitions☆44Updated last year
- Yet another registry parser☆138Updated 3 years ago
- $MFT directory tree reconstruction & FILE record info☆323Updated last year
- ☆129Updated 11 months ago
- A config file that's curated for DFIR examiners with shortcuts to common Windows artifacts and settings enabled that help make your life …☆39Updated last year
- Parser for $UsnJrnl on NTFS☆119Updated 3 years ago
- Library to access the Windows Shell Item format☆73Updated last month
- Extract $MFT record info and log it to a csv file.☆284Updated last year
- Parses the WMI object database....looking for persistence☆34Updated 6 years ago
- $MFT Record Viewer☆23Updated 3 years ago
- Software downloads☆109Updated 8 months ago
- http://moaistory.blogspot.com/2018/10/winsearchdbanalyzer.html☆127Updated last year
- Parser for $LogFile on NTFS☆211Updated 7 months ago
- ☆22Updated last week
- An NTFS/FAT parser for digital forensics & incident response☆216Updated 2 months ago
- Tool to extract the $UsnJrnl from an NTFS volume☆110Updated 6 years ago
- Personal settings for X-Ways Forensics☆32Updated 3 years ago
- A repo that contains a recursive dump from the ROOT key of every Windows Registry hive (using KAPE) from a vanilla (clean) install of eve…☆51Updated 2 months ago
- AppCompatCache (shimcache) parser. Supports Windows 7 (x86 and x64), Windows 8.x, and Windows 10, and Windows 11☆127Updated last year
- A modern Python-3-based alternative to RegRipper☆205Updated 9 months ago
- Documentation repository☆46Updated last year
- Extract compressed memory pages from page-aligned data☆47Updated 7 years ago
- This is a set of tools for doing forensics analysis on Microsoft ESE databases.☆126Updated 3 years ago