libyal / dtformats
Collection of data formats
☆166Updated 3 weeks ago
Alternatives and similar repositories for dtformats:
Users that are interested in dtformats are comparing it to the libraries listed below
- ☆224Updated last week
- Scripts to parse various iOS sysdiagnose logs. Based upon the forensic research of Mattia Epifani, Heather Mahalik and Cheeky4n6monkey.☆179Updated 2 years ago
- Forensic Artifact Collection Tool for macOS☆104Updated 4 months ago
- Windows registry file format specification☆335Updated 6 years ago
- A parser for Unified logging tracev3 files☆82Updated last year
- An AFF4 C++ implementation.☆192Updated last year
- An NTFS/FAT parser for digital forensics & incident response☆198Updated 2 months ago
- Mapping XProtect's obfuscated malware family names to common industry names.☆83Updated 8 months ago
- Parser for OSX/iOS FSEvents Logs☆239Updated last month
- Read and extract data from macOS spotlight databases☆105Updated last year
- FileInsight-plugins: decoding toolbox of McAfee FileInsight hex editor for malware analysis☆159Updated last month
- Yet another library library (and tools)☆202Updated 3 weeks ago
- Automatically exported from code.google.com/p/mac-osx-forensics☆27Updated 9 years ago
- A simple run-only applescript disassembler☆117Updated 2 years ago
- A command line tool for pstree-like output on macOS with additional pid capturing capabilities☆249Updated 4 months ago
- machofile is a module to parse Mach-O binary files☆48Updated 11 months ago
- Tool suite for inspecting NTFS artifacts.☆216Updated last year
- Library and tools to access the Mac OS Hierarchical File System (HFS)☆34Updated 6 months ago
- Library and tools to access the Windows NT Registry File (REGF) format☆114Updated 5 months ago
- Parser fo macOS/iOS FSEvents Logs☆28Updated 8 months ago
- Yet another registry parser☆130Updated 2 years ago
- APFS filesystem format for Kaitai Struct☆81Updated 2 years ago
- This is a work-in-progress command line tool for reversing run-only AppleScripts. It will help parse the output of applescript-disassembl…☆65Updated 4 years ago
- Forensic toolkit for iOS sysdiagnose feature☆172Updated last week
- Library and tools to access the Windows New Technology File System (NTFS)☆196Updated 6 months ago
- macOS .DS_Store Parser☆61Updated 3 years ago
- A timestamp and date decoder written for python 3☆35Updated 5 months ago
- AFF4 Standard Documents☆28Updated 2 years ago
- Python script to parse the NTFS USN Journal☆109Updated 2 years ago
- The Python implementation of the AFF4 standard.☆45Updated 8 months ago