Library and tools to access the Windows New Technology File System (NTFS)
☆225Feb 8, 2026Updated 3 weeks ago
Alternatives and similar repositories for libfsntfs
Users that are interested in libfsntfs are comparing it to the libraries listed below
Sorting:
- Library and tools to access the Master Boot Record (MBR) volume system format☆14Dec 21, 2025Updated 2 months ago
- Forensics tool for NTFS (parser, mft, bitlocker, deleted files)☆596Jul 23, 2023Updated 2 years ago
- Library and tools to access the Extended File System☆18Feb 1, 2026Updated last month
- Windows Event Log Knowledge Base☆31Dec 23, 2025Updated 2 months ago
- ReviveIT (revit) is a proof of concept file recovery tool (carver)☆13Dec 3, 2020Updated 5 years ago
- NTFS file system specimens☆13Jul 3, 2023Updated 2 years ago
- Library and tools to access the Mac OS Hierarchical File System (HFS)☆36Jan 31, 2026Updated last month
- An updated C# port of X-Ways X-Tensions API.☆11Mar 12, 2018Updated 7 years ago
- Library and tools to access the Windows Hibernation File (hiberfil.sys) format☆13Dec 20, 2025Updated 2 months ago
- Inject dll to process in driver☆10Aug 27, 2024Updated last year
- Yet another library library (and tools)☆217Dec 21, 2025Updated 2 months ago
- Library and tools to access the Windows NT Registry File (REGF) format☆132Dec 19, 2025Updated 2 months ago
- Copy of the libewf source code that is configured for a 64-bit MS Visual Studio build.☆17Aug 17, 2020Updated 5 years ago
- Manipulate timestamps on NTFS☆52Nov 10, 2014Updated 11 years ago
- Code to make it easier to write an NDIS network driver on Windows☆93Oct 1, 2023Updated 2 years ago
- Library and tools to access the Windows SuperFetch database format☆13Nov 29, 2025Updated 3 months ago
- A repo that contains a recursive dump from the ROOT key of every Windows Registry hive (using KAPE) from a vanilla (clean) install of eve…☆53Oct 29, 2025Updated 4 months ago
- Library and tools to access the Volume Shadow Snapshot (VSS) format☆113Dec 20, 2025Updated 2 months ago
- Extract files from NTFS Volume☆32May 18, 2021Updated 4 years ago
- Library and tools to access the Windows Event Log (EVT) format☆60Dec 15, 2025Updated 2 months ago
- Windows Registry Knowledge Base☆195Dec 23, 2025Updated 2 months ago
- An NTFS journal parser☆80Mar 3, 2016Updated 9 years ago
- Library and tools to access the BitLocker Drive Encryption (BDE) encrypted volumes☆242Dec 19, 2025Updated 2 months ago
- An aggregate of tools used in the core of vmp_dbg plus other parsing utils to parse vmp bc.☆16Oct 18, 2016Updated 9 years ago
- Various libraries focused on examining/parsing NTFS-specific structures☆16Oct 25, 2015Updated 10 years ago
- Library and tools to access the Windows (Vista/7) Explorer thumbnail cache database format (thumbcache.db)☆17Dec 3, 2025Updated 2 months ago
- Library and tools to access the Windows XML Event Log (EVTX) format☆229Dec 15, 2025Updated 2 months ago
- Library for Windows XML Event Log (EVTX) data types☆18Dec 17, 2025Updated 2 months ago
- Windows PE file debugger☆11Aug 30, 2017Updated 8 years ago
- Library and tools to access the Virtual Hard Disk (VHD) image format☆139Dec 20, 2025Updated 2 months ago
- Library and tools to access the VMware Virtual Disk (VMDK) format☆183Dec 20, 2025Updated 2 months ago
- It's a kernel-based keylogger for Windows x86/x64.☆145Sep 18, 2022Updated 3 years ago
- Library and tools to access the GUID Partition Table (GPT) volume system format☆11Dec 20, 2025Updated 2 months ago
- Simple single file header for creating zero imports drivers. Can be useful for bypassing forensic memory analysis performed by anticheats…☆16Jun 10, 2025Updated 8 months ago
- PowerShell scripts to aid investigators when utilizing O365 and Magnet Axiom.☆12Aug 26, 2024Updated last year
- Confirms the capability of Hardware-Accelerated Virtualization Technology.☆10Updated this week
- Library for Object Linking and Embedding (OLE) data types☆12Nov 27, 2025Updated 3 months ago
- Server for receiving autorun data from the clients☆13Sep 26, 2017Updated 8 years ago
- Repo with supporting material for the talk titled "Cracking the Beacon: Automating the extraction of implant configurations"☆11Feb 6, 2025Updated last year