Alternatives and similar repositories for libesedb:

Users that are interested in libesedb are comparing it to the libraries listed below

• csababarta / ntdsxtract
  Active Directory forensic framework
  ☆323Updated 2 years ago
• mandiant / flare-wmi
  ☆422Updated last year
• kavika13 / RemCom
  Remote Command Executor: A OSS replacement for PsExec and RunAs - or Telnet without having to install a server. Take your pick :)
  ☆343Updated 7 years ago
• leechristensen / UnmanagedPowerShell
  Executes PowerShell from an unmanaged process
  ☆481Updated 8 years ago
• jschicht / RawCopy
  Commandline low level file extractor for NTFS
  ☆280Updated 5 years ago
• libyal / libevtx
  Library and tools to access the Windows XML Event Log (EVTX) format
  ☆195Updated 4 months ago
• volatilityfoundation / community
  Volatility plugins developed and maintained by the community
  ☆354Updated 3 years ago
• enigma0x3 / Misc-PowerShell-Stuff
  random powershell goodness
  ☆441Updated 3 months ago
• SadProcessor / SomeStuff
  Some PowerShell Stuff
  ☆282Updated 2 years ago
• danielbohannon / Revoke-Obfuscation
  PowerShell Obfuscation Detection Framework
  ☆729Updated last year
• rowingdude / analyzeMFT
  analyzeMFT.py is designed to fully parse the MFT file from an NTFS filesystem and present the results as accurately as possible in multip…
  ☆461Updated 4 months ago
• Ben0xA / nps
  Not PowerShell
  ☆446Updated 8 years ago
• williballenthin / INDXParse
  Tool suite for inspecting NTFS artifacts.
  ☆218Updated last year
• darkoperator / Posh-SecMod
  PowerShell Module with Security cmdlets for security work
  ☆439Updated 4 years ago
• mubix / netview
  Netview enumerates systems using WinAPI calls
  ☆293Updated 3 years ago
• jschicht / Mft2Csv
  Extract $MFT record info and log it to a csv file.
  ☆263Updated 4 months ago
• SekoiaLab / Fastir_Collector
  ☆507Updated 4 years ago
• jaredcatkinson / PSReflect-Functions
  Module to provide PowerShell functions that abstract Win32 API functions
  ☆242Updated 8 months ago
• danielbohannon / Invoke-CradleCrafter
  PowerShell Remote Download Cradle Generator & Obfuscator
  ☆826Updated 6 years ago
• RedSiege / WMIOps
  This repo is for WMIOps, a powershell script which uses WMI for various purposes across a network.
  ☆381Updated 7 months ago
• realparisi / WMI_Monitor
  Log newly created WMI consumers and processes to the Windows Application event log
  ☆124Updated 6 years ago
• mattifestation / WMI_Backdoor
  A PoC WMI backdoor presented at Black Hat 2015
  ☆273Updated 9 years ago
• RedSiege / WMImplant
  This is a PowerShell based tool that is designed to act like a RAT. Its interface is that of a shell where any command that is supported …
  ☆811Updated 7 months ago
• msuhanov / regf
  Windows registry file format specification
  ☆337Updated 6 years ago
• CiscoCXSecurity / creddump7
  ☆390Updated 4 years ago
• jschicht / LogFileParser
  Parser for $LogFile on NTFS
  ☆191Updated last year
• williballenthin / python-registry
  Pure Python parser for Windows Registry hives.
  ☆427Updated 3 weeks ago
• Invoke-IR / Uproot
  Currently not updated for WMIEvent module...
  ☆262Updated 8 years ago
• davidpany / WMI_Forensics
  ☆297Updated 4 years ago
• libyal / libyal
  Yet another library library (and tools)
  ☆205Updated last month