libyal / libevt
Library and tools to access the Windows Event Log (EVT) format
☆59Updated 9 months ago
Alternatives and similar repositories for libevt:
Users that are interested in libevt are comparing it to the libraries listed below
- Pure Python parser for data encoded by .NET's BinaryFormatter☆50Updated 6 years ago
- Command-line Interface for Binar.ly☆37Updated 8 years ago
- openioc_scan Volatility Framework plugin☆42Updated 9 years ago
- Modified edition of cuckoomon☆49Updated 6 years ago
- Work Fast With the pattern matching swiss knife for malware researchers.☆38Updated 9 years ago
- Handy scripts to speed up malware analysis☆35Updated last year
- Various Yara signatures (possibly to be included in a release later).☆85Updated 5 years ago
- RegRipper wrapper for simplified bulk parsing or registry hives☆9Updated 6 years ago
- A Rekall interactive document for a Memory Analysis workshop/course.☆43Updated 8 years ago
- Binary commandline executable to parse ETL files☆67Updated 6 years ago
- Extract GUIDs from .NET assemblies☆21Updated 8 years ago
- A repo to hold some scripts pertaining WMI (Windows implementation of WBEM) forensics☆85Updated 7 years ago
- Volatility Plugins☆21Updated 9 years ago
- Transfer EIP control to shellcode during malware analysis investigation☆75Updated 10 years ago
- Library and tools to access the Windows Prefetch File (SCCA) format.☆73Updated 3 months ago
- Pure Python parser for classic Windows Event Log files (.evt)☆48Updated last year
- Yara rules for detecting malware☆23Updated 6 months ago
- An NTFS journal parser☆82Updated 9 years ago
- zer0m0n driver for cuckoo sandbox☆87Updated 8 years ago
- Automatically exported from code.google.com/p/verify-sigs☆18Updated 8 years ago
- BinSequencer is a script designed to find a common pattern of bytes within a set of samples and generate a YARA rule from the identified…☆76Updated 3 years ago
- a collection of yara rules for binary analysis☆24Updated 7 years ago
- Volatility memory forensics plugin for extracting Windows DNS Cache☆29Updated 8 years ago
- Windows registry samples☆23Updated 6 years ago
- onigiri - remote malware triage script☆24Updated 9 years ago
- ☆13Updated 8 years ago
- Various scrips☆12Updated 2 years ago
- Server for receiving autorun data from the clients☆13Updated 7 years ago
- Event Log Analysis Tools☆29Updated 8 years ago
- Pure Python parser for Application Compatibility Shim Databases (.sdb files)☆109Updated 4 years ago