libyal / libfsntfsLinks
Library and tools to access the Windows New Technology File System (NTFS)
☆219Updated last week
Alternatives and similar repositories for libfsntfs
Users that are interested in libfsntfs are comparing it to the libraries listed below
Sorting:
- Library and tools to access the Windows NT Registry File (REGF) format☆128Updated last year
- Windows registry file format specification☆349Updated 7 years ago
- Library and tools to access the Windows Prefetch File (SCCA) format.☆80Updated last month
- Open source implementations of Microsoft compression algorithms☆217Updated 5 years ago
- Yet another library library (and tools)☆213Updated last week
- windows registry hive extraction library. PLEASE DO NOT USE GITHUB FOR ISSUES OR PULL REQUESTS. See the website for how to file a bug or…☆140Updated 6 months ago
- Document ETW providers☆261Updated 5 years ago
- A collection of free miscellaneous Windows tools☆139Updated 3 months ago
- Library and tools to access the Windows Shortcut File (LNK) format☆207Updated last year
- Library and tools to access the Windows XML Event Log (EVTX) format☆218Updated last year
- open source process monitor☆293Updated 6 months ago
- ☆197Updated 9 years ago
- Library and tools to access the OLE 2 Compound File (OLECF) format☆73Updated last year
- Source code for File Test - Interactive File System Test Tool☆299Updated 2 months ago
- Library and tools to access the Virtual Hard Disk (VHD) image format☆132Updated last year
- Events from all manifest-based and mof-based ETW providers across Windows 10 versions☆313Updated last year
- A multiplatform system library☆144Updated 4 years ago
- Analysis and manipulation of extended attribute ($EA) on NTFS☆38Updated 10 years ago
- Forensics tool for NTFS (parser, mft, bitlocker, deleted files)☆542Updated 2 years ago
- Windows Registry Knowledge Base☆186Updated 3 weeks ago
- Print compiler information stored in Rich Header of PE executables.☆144Updated 2 weeks ago
- Microsoft Message Analyzer EOL Archive☆172Updated 5 years ago
- Enhanced version of the classic Spy++ tool☆214Updated last month
- Library and tools to access the BitLocker Drive Encryption (BDE) encrypted volumes☆239Updated last year
- A demo solution to illustrate approaches on getting information about processes and block/allow their start☆111Updated 8 years ago
- A GUI version of the classic PoolMon tool☆118Updated 7 years ago
- Expand compressed files from WinSxS folder☆164Updated 3 months ago
- Process Monitor X v2☆637Updated last year
- capemon: CAPE's monitor☆137Updated last week
- The goal of the tool is to monitor requests received by selected device objects or kernel drivers. The tool is quite similar to IrpTracke…☆399Updated 10 months ago