Alternatives and similar repositories for libesedb:

Users that are interested in libesedb are comparing it to the libraries listed below

• jschicht / RawCopy
  Commandline low level file extractor for NTFS
  ☆277Updated 5 years ago
• csababarta / ntdsxtract
  Active Directory forensic framework
  ☆322Updated 2 years ago
• kavika13 / RemCom
  Remote Command Executor: A OSS replacement for PsExec and RunAs - or Telnet without having to install a server. Take your pick :)
  ☆342Updated 7 years ago
• mandiant / flare-wmi
  ☆419Updated last year
• leechristensen / UnmanagedPowerShell
  Executes PowerShell from an unmanaged process
  ☆476Updated 8 years ago
• enigma0x3 / Misc-PowerShell-Stuff
  random powershell goodness
  ☆441Updated last month
• CiscoCXSecurity / creddump7
  ☆389Updated 4 years ago
• libyal / libevtx
  Library and tools to access the Windows XML Event Log (EVTX) format
  ☆194Updated 3 months ago
• NetSPI / PESecurity
  PowerShell module to check if a Windows binary (EXE/DLL) has been compiled with ASLR, DEP, SafeSEH, StrongNaming, and Authenticode.
  ☆629Updated 5 months ago
• mattifestation / WMI_Backdoor
  A PoC WMI backdoor presented at Black Hat 2015
  ☆271Updated 9 years ago
• mandiant / ShimCacheParser
  ☆274Updated last year
• mattifestation / PowerShellArsenal
  A PowerShell Module Dedicated to Reverse Engineering
  ☆865Updated 3 years ago
• RedSiege / WMIOps
  This repo is for WMIOps, a powershell script which uses WMI for various purposes across a network.
  ☆380Updated 6 months ago
• darkoperator / Posh-SecMod
  PowerShell Module with Security cmdlets for security work
  ☆437Updated 4 years ago
• ctxis / RDP-Replay
  Replay RDP traffic from PCAP
  ☆189Updated 5 years ago
• poweradminllc / PAExec
  Remote execution, like PsExec
  ☆546Updated 3 years ago
• volatilityfoundation / community
  Volatility plugins developed and maintained by the community
  ☆351Updated 3 years ago
• moyix / creddump
  Automatically exported from code.google.com/p/creddump
  ☆247Updated 5 years ago
• danielbohannon / Invoke-CradleCrafter
  PowerShell Remote Download Cradle Generator & Obfuscator
  ☆824Updated 6 years ago
• danielbohannon / Revoke-Obfuscation
  PowerShell Obfuscation Detection Framework
  ☆728Updated last year
• SekoiaLab / Fastir_Collector
  ☆507Updated 3 years ago
• realparisi / WMI_Monitor
  Log newly created WMI consumers and processes to the Windows Application event log
  ☆124Updated 6 years ago
• mattifestation / PSReflect
  Easily define in-memory enums, structs, and Win32 functions in PowerShell
  ☆218Updated 6 years ago
• mandiant / SilkETW
  ☆743Updated last year
• mubix / netview
  Netview enumerates systems using WinAPI calls
  ☆292Updated 2 years ago
• jaredcatkinson / PSReflect-Functions
  Module to provide PowerShell functions that abstract Win32 API functions
  ☆241Updated 7 months ago
• gleeda / memtriage
  Allows you to quickly query a Windows machine for RAM artifacts
  ☆218Updated 4 years ago
• EricZimmerman / Registry
  Full featured, offline Registry parser in C#
  ☆225Updated last week
• Ben0xA / nps
  Not PowerShell
  ☆444Updated 8 years ago