libyal / libfwsiLinks
Library to access the Windows Shell Item format
☆73Updated last week
Alternatives and similar repositories for libfwsi
Users that are interested in libfwsi are comparing it to the libraries listed below
Sorting:
- Lnk file parser☆90Updated 6 months ago
- Win 10/11 related research☆196Updated 2 years ago
- Windows Registry Knowledge Base☆191Updated 3 weeks ago
- Windows 10 (v1803+) ActivitiesCache.db parsers (SQLite, PowerShell, .EXE)☆195Updated 2 years ago
- Extensible Storage Engine (ESE) Database File Knowledge Base☆46Updated 3 weeks ago
- ☆21Updated 11 months ago
- Windows registry file format specification☆352Updated 7 years ago
- Windows Prefetch parser. Supports all known versions from Windows XP to Windows 10.☆115Updated 11 months ago
- Analysis and manipulation of extended attribute ($EA) on NTFS☆38Updated 10 years ago
- Full featured, offline Registry parser in C#☆240Updated 2 months ago
- Parser for $UsnJrnl on NTFS☆118Updated 3 years ago
- Library and tools to access the Windows Shortcut File (LNK) format☆209Updated last week
- Yet another library library (and tools)☆214Updated this week
- A PowerShell module to assist in parsing and managing catalog files.☆22Updated 8 years ago
- This is a fork of Regshot (original found at https://sourceforge.net/projects/regshot/) with very enhanced functionality.☆87Updated 4 years ago
- Parser for $LogFile on NTFS☆208Updated 6 months ago
- Tool to monitor WMI activity on Windows☆301Updated 5 years ago
- Library and tools to access the Windows Prefetch File (SCCA) format.☆81Updated this week
- Decode security descriptors in $Secure on NTFS☆21Updated 3 years ago
- A collection of free miscellaneous Windows tools☆139Updated 5 months ago
- Tool to extract the $UsnJrnl from an NTFS volume☆109Updated 6 years ago
- Expand compressed files from WinSxS folder☆167Updated 5 months ago
- Library and tools to access the Windows NT Registry File (REGF) format☆130Updated this week
- Yet another registry parser☆138Updated 3 years ago
- Automatic and Custom Destinations jump list parser with Windows 10 support☆113Updated 2 months ago
- $MFT Record Viewer☆23Updated 3 years ago
- FileInsight-plugins: decoding toolbox of McAfee FileInsight hex editor for malware analysis☆162Updated last year
- NTFS parser, plus linking capabilites between MFT LogFile and UsnJrnl☆38Updated 9 years ago
- ☆23Updated 11 months ago
- BCD is a module to interact with boot configuration data (BCD) either locally or remotely using the ROOT/WMI:Bcd* WMI classes. The functi…☆61Updated 5 years ago