libyal / libesedbLinks
Library and tools to access the Extensible Storage Engine (ESE) Database File (EDB) format.
☆371Updated last month
Alternatives and similar repositories for libesedb
Users that are interested in libesedb are comparing it to the libraries listed below
Sorting:
- ☆432Updated 2 years ago
- Commandline low level file extractor for NTFS☆304Updated 6 years ago
- Remote Command Executor: A OSS replacement for PsExec and RunAs - or Telnet without having to install a server. Take your pick :)☆365Updated 8 years ago
- Library and tools to access the Windows XML Event Log (EVTX) format☆225Updated last month
- A VBA p-code disassembler☆480Updated 4 years ago
- PowerShell Obfuscation Detection Framework☆749Updated 2 years ago
- Remote execution, like PsExec☆600Updated 11 months ago
- Windows registry file format specification☆353Updated 7 years ago
- A YARA-integrated process denial framework for Windows☆397Updated 5 years ago
- Active Directory forensic framework☆328Updated 3 years ago
- Pure Python parser for Windows Registry hives.☆440Updated 11 months ago
- Executes PowerShell from an unmanaged process☆517Updated 9 years ago
- Replay RDP traffic from PCAP☆199Updated 6 years ago
- ☆280Updated 2 years ago
- Volatility plugins developed and maintained by the community☆375Updated 4 years ago
- Parse evtx files and detect use of the DanderSpritz eventlogedit module☆151Updated 8 years ago
- Log newly created WMI consumers and processes to the Windows Application event log☆124Updated 7 years ago
- Module to provide PowerShell functions that abstract Win32 API functions☆249Updated last year
- Pafish Macro is a Macro enabled Office Document to detect malware analysis systems and sandboxes. It uses evasion & detection techniques …☆292Updated 8 years ago
- Tool suite for inspecting NTFS artifacts.☆225Updated 2 years ago
- Sysmon Tools for PowerShell☆232Updated 7 years ago
- ☆220Updated 7 years ago
- PowerShell script for deobfuscating encoded PowerShell scripts☆431Updated 4 years ago
- Allows you to quickly query a Windows machine for RAM artifacts☆218Updated 5 years ago
- A list of ways to execute code on Windows using legitimate Windows tools☆309Updated 6 years ago
- Easily define in-memory enums, structs, and Win32 functions in PowerShell☆227Updated 7 years ago
- random powershell goodness☆460Updated last year
- Artifact analysis tools by JPCERT/CC Analysis Center☆464Updated 5 months ago
- analyzeMFT.py is designed to fully parse the MFT file from an NTFS filesystem and present the results as accurately as possible in multip…☆518Updated 5 months ago
- ☆816Updated 2 years ago