libyal / libevt
Library and tools to access the Windows Event Log (EVT) format
☆57Updated 2 months ago
Related projects: ⓘ
- Library and tools to access the Windows Prefetch File (SCCA) format.☆70Updated last month
- An NTFS journal parser☆82Updated 8 years ago
- YARA rules for use with ProcFilter☆83Updated 7 years ago
- Yaras Random☆18Updated 5 years ago
- Modified edition of cuckoomon☆48Updated 6 years ago
- Python OpenIOC Editor☆17Updated 8 years ago
- Windows registry samples☆23Updated 5 years ago
- Various Yara signatures (possibly to be included in a release later).☆83Updated 5 years ago
- ☆19Updated 6 years ago
- Command-line Interface for Binar.ly☆37Updated 7 years ago
- Pure Python parser for Application Compatibility Shim Databases (.sdb files)☆104Updated 3 years ago
- openioc_scan Volatility Framework plugin☆42Updated 8 years ago
- A Rekall interactive document for a Memory Analysis workshop/course.☆43Updated 7 years ago
- It's not just UsnJrnl (USN Journal Records/Change Journal Records) parser.☆22Updated 5 years ago
- Decode security descriptors in $Secure on NTFS☆20Updated 2 years ago
- Library and tools to access the Windows SuperFetch database format☆12Updated 2 months ago
- ☆10Updated this week
- Extract GUIDs from .NET assemblies☆21Updated 8 years ago
- Automatically exported from code.google.com/p/verify-sigs☆18Updated 8 years ago
- PE Import Hash Generator☆72Updated 7 years ago
- zer0m0n driver for cuckoo sandbox☆87Updated 8 years ago
- Binary commandline executable to parse ETL files☆67Updated 6 years ago
- Handy scripts to speed up malware analysis☆35Updated 11 months ago
- Python IOC Editor☆61Updated 9 years ago
- Work Fast With the pattern matching swiss knife for malware researchers.☆34Updated 8 years ago
- Pure Python parser for data encoded by .NET's BinaryFormatter☆48Updated 6 years ago
- Server for receiving autorun data from the clients☆13Updated 6 years ago
- Digital Forensics Windows Registry (dfWinReg)☆49Updated 4 months ago
- Extract common Windows artifacts from source images and VSCs☆65Updated 3 years ago
- onigiri - remote malware triage script☆24Updated 8 years ago