libyal / libesedbLinks
Library and tools to access the Extensible Storage Engine (ESE) Database File (EDB) format.
☆359Updated last year
Alternatives and similar repositories for libesedb
Users that are interested in libesedb are comparing it to the libraries listed below
Sorting:
- ☆427Updated 2 years ago
- Active Directory forensic framework☆325Updated 3 years ago
- Remote Command Executor: A OSS replacement for PsExec and RunAs - or Telnet without having to install a server. Take your pick :)☆353Updated 7 years ago
- Library and tools to access the Windows XML Event Log (EVTX) format☆212Updated 10 months ago
- Commandline low level file extractor for NTFS☆294Updated 6 years ago
- PowerShell Obfuscation Detection Framework☆740Updated last year
- Replay RDP traffic from PCAP☆199Updated 6 years ago
- ☆278Updated 2 years ago
- Executes PowerShell from an unmanaged process☆499Updated 9 years ago
- Windows registry file format specification☆342Updated 6 years ago
- Module to provide PowerShell functions that abstract Win32 API functions☆248Updated last year
- Volatility plugins developed and maintained by the community☆365Updated 4 years ago
- Remote execution, like PsExec☆572Updated 5 months ago
- random powershell goodness☆455Updated 8 months ago
- Easily define in-memory enums, structs, and Win32 functions in PowerShell☆224Updated 6 years ago
- Tool suite for inspecting NTFS artifacts.☆223Updated last year
- ☆218Updated 7 years ago
- This repo is for WMIOps, a powershell script which uses WMI for various purposes across a network.☆384Updated last year
- Yet another library library (and tools)☆211Updated 7 months ago
- A PowerShell Module Dedicated to Reverse Engineering☆877Updated 3 years ago
- Sysmon Tools for PowerShell☆230Updated 6 years ago
- Log newly created WMI consumers and processes to the Windows Application event log☆124Updated 7 years ago
- This is a PowerShell based tool that is designed to act like a RAT. Its interface is that of a shell where any command that is supported …☆822Updated last year
- Pure Python parser for Windows Registry hives.☆431Updated 6 months ago
- Parser for $LogFile on NTFS☆199Updated 2 months ago
- Parse evtx files and detect use of the DanderSpritz eventlogedit module☆148Updated 7 years ago
- A list of ways to execute code on Windows using legitimate Windows tools☆307Updated 6 years ago
- Pafish Macro is a Macro enabled Office Document to detect malware analysis systems and sandboxes. It uses evasion & detection techniques …☆289Updated 8 years ago
- Exploit the credentials present in files and memory☆843Updated 2 years ago
- Currently not updated for WMIEvent module...☆261Updated 9 years ago